16fa8f51c81b23a22433640d4a5e5280bd99b984fa14899987678596fa9c272d

Analysis

max time kernel
148s
max time network
112s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/07/2026, 06:03

Target
16fa8f51c81b23a22433640d4a5e5280bd99b984fa14899987678596fa9c272d.exe
Size 19KB
Sample260710-gr4c1sfs81
SHA256 16fa8f51c81b23a22433640d4a5e5280bd99b984fa14899987678596fa9c272d
MD5 a03852c13e239a610a6f55903069e328
SHA1 f5b30939c25b1b38217fe6adc535917742dbe3d3
SHA512 39418e515b60de6eaf970632af0871d64ef62abc8def3767b0a43d9527afadad81de9783b629de6d1fb2e229b93d2a6c8678e65d3bab80192b1a413362d29bd0
SSDEEP 384:OMFNkOUeiKHYpxgx0yIBOTaDVijHNg6KzFhq14Ur0K11KlsNDKYT1TCsCg:7rIxgx01OTKiNgHMMEGsNDKYT1TCsCg
TLSH
T1EF929746E11BAAE4C4D9C7336366526751FCB86022356B3B9FDCA93A4E42330E7502FD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Loads dropped DLL 1 IoCs

pid	Process
5688	rundll32.exe

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 4220 wrote to memory of 5688	4220	16fa8f51c81b23a22433640d4a5e5280bd99b984fa14899987678596fa9c272d.exe	87

C:\Users\Admin\AppData\Local\Temp\16fa8f51c81b23a22433640d4a5e5280bd99b984fa14899987678596fa9c272d.exe
"C:\Users\Admin\AppData\Local\Temp\16fa8f51c81b23a22433640d4a5e5280bd99b984fa14899987678596fa9c272d.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4220
- C:\Windows\SYSTEM32\rundll32.exe
  rundll32.exe "C:\ProgramData\PebblebrookLabs\Archive\ubxring.dll",ServiceHelper
  2⤵
  - Loads dropped DLL
  PID:5688

ubxring.dll

Path C:\ProgramData\PebblebrookLabs\Archive\ubxring.dll
Size 409KB
SHA256 6589cc669a0c09bd5938c9b9f2bb6f499b2807f91477b3617d8d73ee40fad5c3
MD5 b4d0f9fce3baaafc77845b54bb998377
SHA1 6df63760b5db7644b8c41a76228f4eabeb9dbb9a
SHA512 b7fcecb9f276da2b3ab083152041bd8372f23d1cce4debdf587d5baba55137a0a890bd68e403eb7a4c690a5eab80d9f34ef196fb622780a51f051e32c6732509
SSDEEP 6144:f6sImbNDWQ3LiCTA8CN6X/2Oi993LpOsKcwcdVnkXwX62tReGwwnQJxX:SssQ7leOin3kss+VnkgXDtReGwMs
TLSH
T17D940849F1439EE4C8FBC33693161263E6FD78541334AE7B9BCC56A41D80A30B6686ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download