Analysis
- max time kernel
149s - max time network
132s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
- submitted
13/07/2026, 22:40
General
- Target version.dll
- Size 8.5MB
- Sample260713-2ln2csb19x
- SHA256 f2c4c9cb65cab45ad778a811fac6602706dc3a5499583eaadfae4a386f28c3e3
Malware Config
Signatures
- Badlisted process makes network request 1 IoCs
Network request originating from process or tool commonly abused by malware.
- Suspicious use of NtCreateThreadExHideFromDebugger 4 IoCs
- Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\version.dll,#11⤵
- Badlisted process makes network request
- Suspicious use of NtCreateThreadExHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4168-0-0x000001EBB2570000-0x000001EBB2571000-memory.dmp
memory/4168-1-0x00007FFC6AAE0000-0x00007FFC6AD43000-memory.dmp
memory/4168-2-0x00007FFC680F0000-0x00007FFC68491000-memory.dmp
memory/4168-3-0x000001EBB2580000-0x000001EBB25AB000-memory.dmp
memory/4168-89-0x00007FFC4756F000-0x00007FFC47570000-memory.dmp
memory/4168-91-0x000001EBB41D0000-0x000001EBB41FA000-memory.dmp
memory/4168-90-0x00007FFC59F10000-0x00007FFC59F2D000-memory.dmp
memory/4168-92-0x00007FFC473E0000-0x00007FFC47D84000-memory.dmp
memory/4168-93-0x00007FFC473E0000-0x00007FFC47D84000-memory.dmp
memory/4168-94-0x00007FFC473E0000-0x00007FFC47D84000-memory.dmp
memory/4168-95-0x00007FFC473E0000-0x00007FFC47D84000-memory.dmp
memory/4168-96-0x00007FFC473E0000-0x00007FFC47D84000-memory.dmp
memory/4168-97-0x00007FFC473E0000-0x00007FFC47D84000-memory.dmp
memory/4168-98-0x00007FFC473E0000-0x00007FFC47D84000-memory.dmp
memory/4168-99-0x000001EBB2570000-0x000001EBB2571000-memory.dmp