Analysis
- max time kernel
149s - max time network
146s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260706-en - resource tags
- submitted
09/07/2026, 15:21
General
- Target Full_Unboxing_Process_Inspection_Record_2026_391231.dll
- Size 75.0MB
- Sample260709-srce3scx6m
- SHA256 de9123300942f93ba72d2d0f32f99eb032ce4a4f3fb262831517f75561dc2983
Malware Config
Signatures
- Badlisted process makes network request 6 IoCs
Network request originating from process or tool commonly abused by malware.
- Drops startup file 1 IoCs
- Suspicious use of NtCreateThreadExHideFromDebugger 3 IoCs
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\Full_Unboxing_Process_Inspection_Record_2026_391231.dll,#11⤵
- Badlisted process makes network request
- Drops startup file
- Suspicious use of NtCreateThreadExHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
Tmp90A.tmp
memory/6012-241-0x00000216995D0000-0x000002169961C000-memory.dmp
memory/6012-243-0x00007FFBE6BD0000-0x00007FFBE7574000-memory.dmp
memory/6012-229-0x0000021697A30000-0x0000021697A4E000-memory.dmp
memory/6012-235-0x00007FFBE6D5F000-0x00007FFBE6D60000-memory.dmp
memory/6012-236-0x00007FFBE6BD0000-0x00007FFBE7574000-memory.dmp
memory/6012-237-0x00007FFBE6BD0000-0x00007FFBE7574000-memory.dmp
memory/6012-239-0x0000021699500000-0x0000021699554000-memory.dmp
memory/6012-238-0x00007FFBFC090000-0x00007FFBFC0AD000-memory.dmp
memory/6012-240-0x0000021699490000-0x00000216994A8000-memory.dmp
memory/6012-244-0x00007FFBE6BD0000-0x00007FFBE7574000-memory.dmp
memory/6012-2-0x00007FFC08460000-0x00007FFC08801000-memory.dmp
memory/6012-242-0x00007FFBE6BD0000-0x00007FFBE7574000-memory.dmp
memory/6012-0-0x0000021697960000-0x0000021697961000-memory.dmp
memory/6012-245-0x00007FFBE6BD0000-0x00007FFBE7574000-memory.dmp
memory/6012-246-0x00007FFBE6BD0000-0x00007FFBE7574000-memory.dmp
memory/6012-247-0x00007FFBE6BD0000-0x00007FFBE7574000-memory.dmp
memory/6012-248-0x00007FFBE6BD0000-0x00007FFBE7574000-memory.dmp
memory/6012-249-0x00007FFBE6BD0000-0x00007FFBE7574000-memory.dmp
memory/6012-250-0x00007FFBE6BD0000-0x00007FFBE7574000-memory.dmp
memory/6012-1-0x00007FFC0AAC0000-0x00007FFC0AD23000-memory.dmp
memory/6012-261-0x0000021697960000-0x0000021697961000-memory.dmp
memory/6012-262-0x00007FFBE6BD0000-0x00007FFBE7574000-memory.dmp