Analysis
- max time kernel
899s - max time network
462s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-ja - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-jalocale:ja-jpos:windows11-ltsc_2024-x64systemwindows - submitted
13/07/2026, 04:33
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
RKM-20260713-1514.7z
Resource
win10v2004-20260513-ja
10 signatures
900 seconds
Behavioral task
behavioral2
Sample
RKM-20260713-1514.7z
Resource
win11ltsc2024-20260709-ja
12 signatures
900 seconds
Behavioral task
behavioral3
Sample
nvml.dll
Resource
win10v2004-20260513-ja
0 signatures
900 seconds
Behavioral task
behavioral4
Sample
nvml.dll
Resource
win11ltsc2024-20260709-ja
0 signatures
900 seconds
General
- Target nvml.dll
- Size 333KB
- Sample260713-e6t2sady9y
- SHA256 c215dcea7c589607ec6bf04d616fd881b07c102b8c10b73bab97fb4a7d0f93c2
- MD5 d44c63da2856e6f8b4c80275626ab7e2
- SHA1 ce934f5d775fcecd191277b32c87b9815c16e616
- SHA512 4eda628355ef644eb0530651789a0cc8df4c9415ee411805eee9c4a9a874359dca74769c65d09fb35a69ce3d462a752079b83faba892913bee21339380e83465
- SSDEEP 6144:eI37CabAS+kKnkE2MKVugHy8iZp2jnwLzxDAwcSHrnwOj3nnt8kDIKP/:bCuXck37ITO0JYSHDFjXnqiIKX
- TLSH T166747C54F281FDB5EC898FB434E22349D3A6B041971DE93F6A20FE3C015EA68D573A49
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\nvml.dll,#11⤵PID:1292
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵PID:1744
-
C:\Windows\System32\SecurityHealthHost.exe\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding1⤵PID:5604