Analysis
- max time kernel
149s - max time network
145s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
- submitted
30/07/2026, 12:49
General
- Target fd9b2286ab43a35a2a656e6cca8fc8a694029d882d000e8ace4faf37bb236516.dll
- Size 1.8MB
- Sample260730-p2pavaybnd
- SHA256 fd9b2286ab43a35a2a656e6cca8fc8a694029d882d000e8ace4faf37bb236516
Score
5/10
Malware Config
Signatures
- Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\fd9b2286ab43a35a2a656e6cca8fc8a694029d882d000e8ace4faf37bb236516.dll,#11⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4804-0-0x00007FFEB4D80000-0x00007FFEB52DD000-memory.dmp
memory/4804-3-0x00007FFEB4D80000-0x00007FFEB52DD000-memory.dmp
memory/4804-5-0x00007FFE910D0000-0x00007FFE910E0000-memory.dmp
memory/4804-8-0x00007FFE910D0000-0x00007FFE910E0000-memory.dmp
memory/4804-6-0x00007FFE910D0000-0x00007FFE910E0000-memory.dmp
memory/4804-4-0x00007FFE910D0000-0x00007FFE910E0000-memory.dmp
memory/4804-9-0x00007FFE9A690000-0x00007FFE9A885000-memory.dmp
memory/4804-10-0x00007FFE9A690000-0x00007FFE9A885000-memory.dmp
memory/4804-11-0x00007FFE9A690000-0x00007FFE9A885000-memory.dmp
memory/4804-20-0x00007FFE98480000-0x00007FFE98749000-memory.dmp
memory/4804-21-0x00007FFE98480000-0x00007FFE98749000-memory.dmp
memory/4804-28-0x00007FFEB4D80000-0x00007FFEB52DD000-memory.dmp