700711af3c7892df25bdd71b1ba8eeaf217fd19e080705cf2ba462461aa8f6ca

Analysis

user interaction
yes
max time kernel
149s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
12/07/2026, 10:42

Target
Asuna.dll
Size 2.9MB
Sample260712-mrrbcaas2w
SHA256 700711af3c7892df25bdd71b1ba8eeaf217fd19e080705cf2ba462461aa8f6ca
MD5 5380e58fb0c63a97ec2df853b29345fc
SHA1 0f243ecc859c0bf13df025a58b66b641163da4c3
SHA512 95f60e4f325244d6ce1d126ac7dcd5397b07ccd7bf8d1fd8af001db09053789f3839a0c240bbe92414e74d78d9f1d1fd19f7a5abb08b58fc958033dcb4dc152c
SSDEEP 49152:TjwfAgzKpBIGscW8nf4FbRjHnJyLoeRohOCBAAE5bBcnwDVJ7:gYVTC
TLSH
T19BE5BF22E29800CDC93AD0B4C63BEB12F67A744193366FDB2558696A1F37BE5177E700
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
6100	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\Asuna.dll,#1
1⤵
- Suspicious use of FindShellTrayWindow
PID:6100

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:1676