Analysis
- max time kernel
148s - max time network
114s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
10/07/2026, 17:47
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
neverlose_upd.dll
Resource
win10v2004-20260513-en
26 signatures
150 seconds
Behavioral task
behavioral2
Sample
neverlose_upd.dll
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
General
- Target neverlose_upd.dll
- Size 2.9MB
- Sample260710-wc4gssgv21
- SHA256 9bc4eb1d599502f5b16ae0e3c91c24eb12d661d7d2b088945dd5b776848d6fc9
- MD5 3cc1e10c6b683a0a3e3be494e6b27b66
- SHA1 d15f16295b4477851c7583a79024330e92c2f530
- SHA512 71f0ae44f6af92ac59789d43e83fee2b68058c0995505958431b88e3f2bcd065942897b63e77cf364c257971a1192adebdcac4cb43d5f3e8f50321519e1d40ca
- SSDEEP 24576:2GsACzXRWD3IC0mtDTrIeVOLXbiPMsqzs+9bFHnVMZs/TxB8BK1tyFDG4OIKkM29:27AAYD3mcVkbi8n7nGLOIJL
- TLSH T1FEE5BF4AF3EA42AAC167C23C8B52D627E6B17C05131077EB7BC44A2D2F53BD056B9319
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Malware Config
Signatures
- Badlisted process makes network request 4 IoCs
Network request originating from process or tool commonly abused by malware.
flow pid Process 2 5900 rundll32.exe 3 5900 rundll32.exe 4 5900 rundll32.exe 5 5900 rundll32.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 5900 rundll32.exe