Analysis
- max time kernel
148s - max time network
114s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
28/07/2026, 07:46
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
d99392248bdd7e351e63ead6733638ba.dll
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
d99392248bdd7e351e63ead6733638ba.dll
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target d99392248bdd7e351e63ead6733638ba.dll
- Size 690KB
- Sample260728-jmcqlsdr7s
- SHA256 0a19870ba24aeb9d4b5dde091ef8071d76f8a5e43ac8c6f5b9f283020580a60a
- MD5 d99392248bdd7e351e63ead6733638ba
- SHA1 e7f240a76337620682d25c5aa654255905ba0b59
- SHA512 fcc9080c9794a5f6e3f5ccf1532d72ad125d9739c78b3e3c5c2bb4b2756297de7a0173707b00f6b881406c5da3cfacb6b7aa63d5c6443d53aeb0c0494f0f8519
- SSDEEP 6144:DMkyq8nmVF98l3XAiTRQBqKRVaUuSp6CdqcuMFXKUi4W2PhsH:DM+8AUl3QiTOB3RjJ6q1XJPhsH
- TLSH T1EEE47D65B7E812D2E0B7C13E8A97CF56E6B2B8140720A7C701D442A97F17BE44A3F716
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d99392248bdd7e351e63ead6733638ba.dll,#11⤵PID:4132
-
C:\Windows\system32\rundll32.exeC:\Windows\system32\rundll32.exe1⤵PID:3272
-
C:\Windows\system32\rundll32.exe"C:\Windows\system32\rundll32.exe"1⤵PID:5988
-
C:\Windows\system32\rundll32.exe"C:\Windows\system32\rundll32.exe"1⤵PID:4384
-
C:\Windows\system32\rundll32.exe"C:\Windows\system32\rundll32.exe"1⤵PID:4900