Overview
overview
10Static
static
3Secur32.dll
windows10-2004-x64
7Secur32.dll
windows11-ltsc_2024-x64
7Tax-Number735863.exe
windows10-2004-x64
10msvcp140.dll
windows10-2004-x64
1msvcp140.dll
windows11-ltsc_2024-x64
1ucrtbase.dll
windows10-2004-x64
1vcruntime140.dll
windows10-2004-x64
1vcruntime140.dll
windows11-ltsc_2024-x64
1vcruntime140_1.dll
windows10-2004-x64
1vcruntime140_1.dll
windows11-ltsc_2024-x64
1Analysis
- max time kernel
150s - max time network
142s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
23/07/2026, 06:26
Static task
static1
Behavioral task
behavioral1
Sample
Secur32.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Secur32.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
Tax-Number735863.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
msvcp140.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral5
Sample
msvcp140.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral6
Sample
ucrtbase.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral7
Sample
vcruntime140.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
vcruntime140.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
vcruntime140_1.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
vcruntime140_1.dll
Resource
win11ltsc2024-20260709-en
General
- Target Secur32.dll
- Size 481.2MB
- Sample260723-g7fxnahd75
- SHA256 5c373876a8809d503a329b528f44ec6cbaa2eae834b560be0ea819ce532dc4e6
- MD5 958ec66aff59d7f4924614ef6bcb4f1b
- SHA1 5985085db32b8e384a8384b757c4398672d8feb7
- SHA512 d89de0fc26969fdff832866155b4a5e87ec0f0d1f8468a6e9dfd77646d3ca91ba611a7f049b93366713cac09d695ba5552534648bc588d88baafb453ca45cedd
- SSDEEP 24576:VPe9kjznfGCtQpbECLy3tb9pHACdiSdI1n50heaKpswOSTouB9Lrxxk9jjrTN0CM:VPe9knL5+50hAOIou7/xxsj/WG1QLtyO
- TLSH T154399D14E3AB11A8D567DA34CA529332D6B078D67721A48F1698CE352F33EF09B7B311
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Executes dropped EXE 1 IoCs
pid Process 5916 DCRCVDrv.sys - Suspicious behavior: LoadsDriver 1 IoCs
pid Process 812 Process not Found
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Windows\Temp\DCRCVDrv.sys
- Size 137KB
- SHA256 87e8d39db624f37d3e77aedf487a2dfd197f71a4730ea74f4e7a4341deaec2ff
- MD5 567c158ee0858f8e941d4ab7a6c18dbc
- SHA1 47d922b0fd5d704025d14ef98ded46e74830a423
- SHA512 f976cb8e9a2f0fc769e2e4345d18e1e9f01fdb1c4303eb20d94b625467e60ce20dd120e77a96d9ba498361dd6dc0066535404cb22cf99fc49607d1f35eaed2ab
- SSDEEP 3072:6pEFTp46B6ETbeP/ItLK9Di8/4BQaeJzP:Y8Tp46B6EOLgBQX
- TLSH T10CD33A12A36550A4E977E2B8C6B65263EFF37861133547CF03608A654F23BE4B93A3D1
- MD5 SHA1 SHA512 SSDEEP TLSH