Analysis
- max time kernel
148s - max time network
129s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260629-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
06/07/2026, 07:59
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
1255d496a426d136564a136399bd5af841c8fd13b47e16ab247c818d64189b59.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
1255d496a426d136564a136399bd5af841c8fd13b47e16ab247c818d64189b59.exe
Resource
win11ltsc2024-20260629-en
2 signatures
150 seconds
General
- Target 1255d496a426d136564a136399bd5af841c8fd13b47e16ab247c818d64189b59.exe
- Size 12KB
- Sample260706-jvmwjsfv4q
- SHA256 1255d496a426d136564a136399bd5af841c8fd13b47e16ab247c818d64189b59
- MD5 0f774e264585516e95fd3189e9c8163a
- SHA1 d55ad9f43f5579b52289d3cf9adf5018844c0cc4
- SHA512 0e5d045319f2878a1b6f7b79246dbb5b806b34f119711940011afbad980e81ecec6a141502346fa76019b5eabe8056c54302e0f6f15c107544745e424f392e15
- SSDEEP 192:KXuV/WrejY4mQhSuIjp7eb+FLHLwSdYI85G1XJ7Fp/RJ8J3Vw6:KwjMlTuIjpHHLwSd85GDPoJlw
- TLSH T19E422AC2B1D2D1F8C19BC379A56B12B3A277344123367BBF774D84504F927309AA8A9D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Loads dropped DLL 1 IoCs
pid Process 6068 rundll32.exe - Suspicious use of WriteProcessMemory 1 IoCs
description pid Process procid_target PID 1472 wrote to memory of 6068 1472 1255d496a426d136564a136399bd5af841c8fd13b47e16ab247c818d64189b59.exe 89
Processes
-
C:\Users\Admin\AppData\Local\Temp\1255d496a426d136564a136399bd5af841c8fd13b47e16ab247c818d64189b59.exe"C:\Users\Admin\AppData\Local\Temp\1255d496a426d136564a136399bd5af841c8fd13b47e16ab247c818d64189b59.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:1472 -
C:\Windows\SYSTEM32\rundll32.exerundll32.exe "C:\ProgramData\NyxoraSys\yhd-yoke.dll",UpdateHandler2⤵
- Loads dropped DLL
PID:6068
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\ProgramData\NyxoraSys\yhd-yoke.dll
- Size 416KB
- SHA256 f76637d0e211617a2caac0664f38f71ed20991f3c4d602229adc851a050bfb89
- MD5 081f06f76347bfdd0fa630dba13ee882
- SHA1 70e4dbdbde6f0811ff00dbb7258892deac5ac3ac
- SHA512 6a752b126e4c47f0de7740a77db123c149f4d8e0d14407ea5a374bb0e338ee5fdc77625372182d2e53f5b8283aaa7330e3fedf7480d6b24c6616db2e7d529d96
- SSDEEP 12288:/JTrEGhnM4ALcI/IC/2K7f61tG0yrGpiDFopKj:GCM4ahB/2K7f61k0yypkC+
- TLSH T1EB94F755F1439EE4C4FBC336936652A3AAFCB81823349A379BCC57651DC0630B6292ED
- MD5 SHA1 SHA512 SSDEEP TLSH