Analysis
- max time kernel
148s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
17/07/2026, 08:13
General
- Target 685ae17ec44aa236c6cd65fd01ab1b44a91e5b1e02f594294f697af4ea5f96e1.dll
- Size 1.8MB
- Sample260717-j4pfqsax71
- SHA256 685ae17ec44aa236c6cd65fd01ab1b44a91e5b1e02f594294f697af4ea5f96e1
Score
5/10
Malware Config
Signatures
- Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\685ae17ec44aa236c6cd65fd01ab1b44a91e5b1e02f594294f697af4ea5f96e1.dll,#11⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4356-0-0x00007FFAB2460000-0x00007FFAB29BC000-memory.dmp
memory/4356-1-0x00007FFAB2460000-0x00007FFAB29BC000-memory.dmp
memory/4356-6-0x00007FFA93520000-0x00007FFA93530000-memory.dmp
memory/4356-8-0x00007FFAA19A0000-0x00007FFAA1C03000-memory.dmp
memory/4356-9-0x00007FFA93520000-0x00007FFA93530000-memory.dmp
memory/4356-5-0x00007FFA93520000-0x00007FFA93530000-memory.dmp
memory/4356-4-0x00007FFA93520000-0x00007FFA93530000-memory.dmp
memory/4356-10-0x00007FFAA19A0000-0x00007FFAA1C03000-memory.dmp
memory/4356-16-0x00007FFAA19A0000-0x00007FFAA1C03000-memory.dmp
memory/4356-25-0x00007FFA9F000000-0x00007FFA9F3A1000-memory.dmp
memory/4356-26-0x00007FFA9F000000-0x00007FFA9F3A1000-memory.dmp
memory/4356-34-0x00007FFAB2460000-0x00007FFAB29BC000-memory.dmp