Analysis
- max time kernel
148s - max time network
152s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
30/07/2026, 05:13
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
621e8da796f2f234a5aa7e77ef0f224e32c5005e0b5a38ac3e77db15487b651f.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
621e8da796f2f234a5aa7e77ef0f224e32c5005e0b5a38ac3e77db15487b651f.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
General
- Target 621e8da796f2f234a5aa7e77ef0f224e32c5005e0b5a38ac3e77db15487b651f.dll
- Size 5.1MB
- Sample260730-fwf8lsdj8x
- SHA256 621e8da796f2f234a5aa7e77ef0f224e32c5005e0b5a38ac3e77db15487b651f
- MD5 0b652fd1121bc2178fbb3fe216bd3d68
- SHA1 3bd7a1d4649d5229314ae124e39053ffa511a31a
- SHA512 716a6feecfebac60f0f8a6b40c93b3a376daa25a308a79dce10e84a6583b393b63125b8179c48098657fe8cd163bebcb0e156a56558cf138f1292278988a35d6
- SSDEEP 98304:Nf74FByzWfqCwrzUS+z5+CP9HfCXpe8kknmwzQRB62VrGYDIN+Pgdyn//NSrX:N7pWfq9rzZ+1X9CXhrzQRB6sGGAQbdSz
- TLSH T1A14633A8FC865DF2CD108CB716989D4F62E710A0E7C65C850EAAE3117E8D7396851FBC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 rundll32.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Identifier rundll32.exe - Enumerates system info in registry 2 TTPs 2 IoCs
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS rundll32.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer rundll32.exe - Suspicious use of AdjustPrivilegeToken 64 IoCs
description pid Process Token: SeDebugPrivilege 3184 rundll32.exe Token: SeDebugPrivilege 3184 rundll32.exe Token: SeDebugPrivilege 3184 rundll32.exe Token: SeDebugPrivilege 3184 rundll32.exe Token: SeDebugPrivilege 3184 rundll32.exe Token: SeDebugPrivilege 3184 rundll32.exe Token: SeDebugPrivilege 3184 rundll32.exe Token: SeDebugPrivilege 3184 rundll32.exe Token: SeDebugPrivilege 3184 rundll32.exe Token: SeDebugPrivilege 3184 rundll32.exe Token: SeDebugPrivilege 3184 rundll32.exe Token: SeDebugPrivilege 3184 rundll32.exe Token: SeDebugPrivilege 3184 rundll32.exe Token: SeDebugPrivilege 3184 rundll32.exe Token: SeDebugPrivilege 3184 rundll32.exe Token: SeDebugPrivilege 3184 rundll32.exe Token: SeDebugPrivilege 3184 rundll32.exe Token: SeDebugPrivilege 3184 rundll32.exe Token: SeDebugPrivilege 3184 rundll32.exe Token: SeDebugPrivilege 3184 rundll32.exe Token: SeDebugPrivilege 3184 rundll32.exe Token: SeDebugPrivilege 3184 rundll32.exe Token: SeDebugPrivilege 3184 rundll32.exe Token: SeDebugPrivilege 3184 rundll32.exe Token: SeDebugPrivilege 3184 rundll32.exe Token: SeDebugPrivilege 3184 rundll32.exe Token: SeDebugPrivilege 3184 rundll32.exe Token: SeDebugPrivilege 3184 rundll32.exe Token: SeDebugPrivilege 3184 rundll32.exe Token: SeDebugPrivilege 3184 rundll32.exe Token: SeDebugPrivilege 3184 rundll32.exe Token: SeDebugPrivilege 3184 rundll32.exe Token: SeDebugPrivilege 3184 rundll32.exe Token: SeDebugPrivilege 3184 rundll32.exe Token: SeDebugPrivilege 3184 rundll32.exe Token: SeDebugPrivilege 3184 rundll32.exe Token: SeDebugPrivilege 3184 rundll32.exe Token: SeDebugPrivilege 3184 rundll32.exe Token: SeDebugPrivilege 3184 rundll32.exe Token: SeDebugPrivilege 3184 rundll32.exe Token: SeDebugPrivilege 3184 rundll32.exe Token: SeDebugPrivilege 3184 rundll32.exe Token: SeDebugPrivilege 3184 rundll32.exe Token: SeDebugPrivilege 3184 rundll32.exe Token: SeDebugPrivilege 3184 rundll32.exe Token: SeDebugPrivilege 3184 rundll32.exe Token: SeDebugPrivilege 3184 rundll32.exe Token: SeDebugPrivilege 3184 rundll32.exe Token: SeDebugPrivilege 3184 rundll32.exe Token: SeDebugPrivilege 3184 rundll32.exe Token: SeDebugPrivilege 3184 rundll32.exe Token: SeDebugPrivilege 3184 rundll32.exe Token: SeDebugPrivilege 3184 rundll32.exe Token: SeDebugPrivilege 3184 rundll32.exe Token: SeDebugPrivilege 3184 rundll32.exe Token: SeDebugPrivilege 3184 rundll32.exe Token: SeDebugPrivilege 3184 rundll32.exe Token: SeDebugPrivilege 3184 rundll32.exe Token: SeDebugPrivilege 3184 rundll32.exe Token: SeDebugPrivilege 3184 rundll32.exe Token: SeDebugPrivilege 3184 rundll32.exe Token: SeDebugPrivilege 3184 rundll32.exe Token: SeDebugPrivilege 3184 rundll32.exe Token: SeDebugPrivilege 3184 rundll32.exe
Processes
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\ProgramData\Sentinel\SuperDog\0d63e0bd-73ba-fd90-b405-1048d8b6ec9a\.434e4631\.iikldkak
- Size 120B
- SHA256 a91bac2771e8a3ee189f7b1d9f5d26aa477ae54f2c6221c2d5cb35c93d56a9d9
- MD5 b36efaa0b69ddae5d98a4add1739c938
- SHA1 0ec1c9501cf5cc50511b84cbc3ff168fcbe1b9dd
- SHA512 59519d2a3412decd8205eebd99db8d647bff5c2d3a198f1d6e6fe2fb768b8c285256587806fda708ba51b093b5cced2659bffec0e5a4aeb5b261b00c0b8d42c9
- TLSH T156B02B1B720BC43088C278120325C83408E044C004D10851180002D0C38425A85715C4
- MD5 SHA1 SHA512 TLSH