fbeec8a0f29b2e4a2ee21126b3cd533c8f6bc7aceba2f57e44ce6dbd627b956b

Analysis

max time kernel
148s
max time network
123s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260629-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
06/07/2026, 08:34

Target
fbeec8a0f29b2e4a2ee21126b3cd533c8f6bc7aceba2f57e44ce6dbd627b956b.exe
Size 14KB
Sample260706-kgetfscx5x
SHA256 fbeec8a0f29b2e4a2ee21126b3cd533c8f6bc7aceba2f57e44ce6dbd627b956b
MD5 298c9e8c0ccd8d6e1a4df49913046dcf
SHA1 3bb5d7113bed8d877f59d08f501145fbf9f136d2
SHA512 63bf17bc9190a197eae5cbc16dec799d28343ac626f5822c0a1da50f02f9828a639d888ad3633867e8c22d017087bbcc276a48c0c3758f88a0e1db98080c0006
SSDEEP 384:ONBEqCMvJl1FnRsDKsJqFgb6P8738b8Yl:2vJlJeKIqFg2487
TLSH
T1E162F9D6709721ADC0B9C33AC74E42B7D7F1704113292BBF9BDDC1A43A916507AA87C5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Loads dropped DLL 1 IoCs

pid	Process
5392	rundll32.exe

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 6012 wrote to memory of 5392	6012	fbeec8a0f29b2e4a2ee21126b3cd533c8f6bc7aceba2f57e44ce6dbd627b956b.exe	90

C:\Users\Admin\AppData\Local\Temp\fbeec8a0f29b2e4a2ee21126b3cd533c8f6bc7aceba2f57e44ce6dbd627b956b.exe
"C:\Users\Admin\AppData\Local\Temp\fbeec8a0f29b2e4a2ee21126b3cd533c8f6bc7aceba2f57e44ce6dbd627b956b.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:6012
- C:\Windows\SYSTEM32\rundll32.exe
  rundll32.exe "C:\ProgramData\RVMCorp\xqt-loop.dll",ProcessComponent
  2⤵
  - Loads dropped DLL
  PID:5392

xqt-loop.dll

Path C:\ProgramData\RVMCorp\xqt-loop.dll
Size 412KB
SHA256 712c79df1239aa51fa677f65b77cbc42f74599ff663d6182abc63a8328ad2f08
MD5 c32b4efbedb6bb33bbcf0389f46b5e5e
SHA1 c768678aa70d0348dd2222a3294fbbe4a0ed29f0
SHA512 2407c6a64a83fb98bb3675e35ff450c2c60f9596e1464a4ed2a959ee8e0447f4dda09853a79cce81a66549593c9792afb313b80f929124a6b2f9aef1241f5a14
SSDEEP 6144:w34OmzX0Gr7z9/71oWzGWdW+Ck7LQYykeQylLZwKvp7exPIz737PgmaDsJ57mdbg:a8X0O7N4z93fDUDK57QJG
TLSH
T142942995F0439FE4C4FBC3369256426399FCB80817309EBB9BCC56651D80BA0B6792ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download