a5e7b338af82fbe4e881ff2e32e3fc17fa09809222fdc2285d79c6e8da1f330f

Analysis

max time kernel
148s
max time network
122s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260629-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
05/07/2026, 06:02

Target
a5e7b338af82fbe4e881ff2e32e3fc17fa09809222fdc2285d79c6e8da1f330f.exe
Size 13KB
Sample260705-grysjaas8v
SHA256 a5e7b338af82fbe4e881ff2e32e3fc17fa09809222fdc2285d79c6e8da1f330f
MD5 062d731e7de904b5771bd1227ecef608
SHA1 a3fe2da9938d172b291b48c6b842982c5edd83d5
SHA512 994cb39d07d147625b4a09f2b64dd363729c9b51271698e11adf281f4c856a003ee8f48ce8eeb60b709c53bbc6e3240671e38e7fad35b1bcb2b6592f5fa00b8b
SSDEEP 192:vNQiuy4UMveJ+EOgPm/jaVwVAsEL5cw0pmCdXhkc3Vw+l:mlybVwSsScvhkclw+
TLSH
T17D521BCB7193F0BDC479C278CACE1677EA6134840B2B47FF41E8829479D35A07A78264
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Loads dropped DLL 1 IoCs

pid	Process
2292	rundll32.exe

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 4580 wrote to memory of 2292	4580	a5e7b338af82fbe4e881ff2e32e3fc17fa09809222fdc2285d79c6e8da1f330f.exe	91

C:\Users\Admin\AppData\Local\Temp\a5e7b338af82fbe4e881ff2e32e3fc17fa09809222fdc2285d79c6e8da1f330f.exe
"C:\Users\Admin\AppData\Local\Temp\a5e7b338af82fbe4e881ff2e32e3fc17fa09809222fdc2285d79c6e8da1f330f.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4580
- C:\Windows\SYSTEM32\rundll32.exe
  rundll32.exe "C:\ProgramData\NyrvexEng\Manager\Cache\wrpeng.dll",RegisterComponent
  2⤵
  - Loads dropped DLL
  PID:2292

wrpeng.dll

Path C:\ProgramData\NyrvexEng\Manager\Cache\wrpeng.dll
Size 410KB
SHA256 0def2f1930b6e6d4f9122bd34a90bf6ac0e2d4985e3dbe12dca3233a3c31b57c
MD5 9616aee97e460921abfb02873c90f87a
SHA1 6528c02dc8eb14cd34d302fc24ee1b5765176747
SHA512 877b471200bdcae1f00a2c4eed6af8628922e100fcb6845ab73c535bbbc40ddc215f266bacb043b03d13659eecb740755d8cf463f0995b6589b4c965377c6292
SSDEEP 6144:iXcNgO0MUqgPlIGsuEcB5kxBJFO6MNIH5oAIB55H9948JmG94P0:iXcNSx8u9B5+6t+H5oAYp+tG94
TLSH
T1B3941885F143AEF4C4EBC335920652E39AFC78181B345E7B9BC86B641E80761B6346ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download