Analysis
- max time kernel
148s - max time network
99s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
- submitted
11/07/2026, 03:34
General
- Target cbdeb5df391dc3be560cb715e34a0752f7ca41293146dcef1bb0949618b2c08a.dll
- Size 8.9MB
- Sample260711-d4w8padt5y
- SHA256 cbdeb5df391dc3be560cb715e34a0752f7ca41293146dcef1bb0949618b2c08a
Score
8/10
Malware Config
Signatures
- Badlisted process makes network request 1 IoCs
Network request originating from process or tool commonly abused by malware.
- Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
- Suspicious behavior: EnumeratesProcesses 6 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\cbdeb5df391dc3be560cb715e34a0752f7ca41293146dcef1bb0949618b2c08a.dll,#11⤵
- Badlisted process makes network request
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/6032-0-0x00007FFE56E50000-0x00007FFE56E52000-memory.dmp
memory/6032-2-0x00007FFE56E60000-0x00007FFE56E62000-memory.dmp
memory/6032-3-0x00007FFE56E70000-0x00007FFE56E72000-memory.dmp
memory/6032-4-0x00007FFE56E80000-0x00007FFE56E82000-memory.dmp
memory/6032-5-0x00007FFE55420000-0x00007FFE55422000-memory.dmp
memory/6032-6-0x00007FFE55B30000-0x00007FFE55B32000-memory.dmp
memory/6032-7-0x00007FFE54900000-0x00007FFE54902000-memory.dmp
memory/6032-8-0x00007FFE54910000-0x00007FFE54912000-memory.dmp
memory/6032-9-0x00007FFE32C70000-0x00007FFE33CD9000-memory.dmp
memory/6032-13-0x000002BB2A3F0000-0x000002BB2A489000-memory.dmp