Analysis
- max time kernel
148s - max time network
132s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
29/07/2026, 04:36
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
a47b9278fcbe694c0a00b5817cfc18f78d608e23965586b42c86e852a2f511fe.dll
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
a47b9278fcbe694c0a00b5817cfc18f78d608e23965586b42c86e852a2f511fe.dll
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target a47b9278fcbe694c0a00b5817cfc18f78d608e23965586b42c86e852a2f511fe.dll
- Size 644KB
- Sample260729-e8h3asea73
- SHA256 a47b9278fcbe694c0a00b5817cfc18f78d608e23965586b42c86e852a2f511fe
- MD5 8b2bea742aeb7c676cd5d90dbc4c091f
- SHA1 8a62318bbea17aaafad504763b77c157472c778b
- SHA512 9a65c9b88cf6b7e7c55d80b445175e03376db67f6f4a918913b01fac7a4ea94d95391ddfff94c4a67fe5fcefd56f228aaf748833c4adc056aa71866c5c4daae8
- SSDEEP 3072:KokF22ijCf+AllmJOMK3/olz+hsi/qdcsAghV0ezVRxaz0bNIESdtBwj6ftHB9KE:JkF2GMiixBVebH1N49j+
- TLSH T1B6E4959033E45893F536833848F6D2313B39BB815766CB1BD500A92D1E37BC3AE99B56
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Modifies registry class 10 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{2206CDB0-19C1-11D1-89E0-00C04FD7A829}\ = "MSDAINITIALIZE" regsvr32.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{2206CDB0-19C1-11D1-89E0-00C04FD7A829}\Version regsvr32.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{2206CDB0-19C1-11D1-89E0-00C04FD7A829}\Version\ = "1.0" regsvr32.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID regsvr32.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{2206CDB2-19C1-11D1-89E0-00C04FD7A829} regsvr32.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{2206CDB2-19C1-11D1-89E0-00C04FD7A829}\Version regsvr32.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\DataLinks\ = "DataLinks" regsvr32.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{2206CDB0-19C1-11D1-89E0-00C04FD7A829}\TypeLib regsvr32.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{2206CDB0-19C1-11D1-89E0-00C04FD7A829}\TypeLib\ = "{2206CEB0-19C1-11D1-89E0-00C04FD7A829}" regsvr32.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{2206CDB2-19C1-11D1-89E0-00C04FD7A829}\TypeLib regsvr32.exe