Analysis
- max time kernel
148s - max time network
145s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
31/07/2026, 10:24
General
- Target 0f377e7dcc400928c137872cffe5fade1a23fbfe4fb0caca36978e4fa8f0f10e.dll
- Size 7.5MB
- Sample260731-mftmbs1vcs
- SHA256 0f377e7dcc400928c137872cffe5fade1a23fbfe4fb0caca36978e4fa8f0f10e
Malware Config
Signatures
- Suspicious use of NtCreateUserProcessOtherParentProcess 1 IoCs
- Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
- Suspicious use of SetThreadContext 1 IoCs
- Suspicious behavior: EnumeratesProcesses 2 IoCs
- Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Windows\explorer.exeexplorer.exe /LOADSAVEDWINDOWS1⤵
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\0f377e7dcc400928c137872cffe5fade1a23fbfe4fb0caca36978e4fa8f0f10e.dll,#12⤵
- Suspicious use of NtCreateUserProcessOtherParentProcess
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious use of SetThreadContext
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
-
-
C:\Windows\SysWOW64\explorer.exe"C:\Windows\SysWOW64\explorer.exe"2⤵
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4192-0-0x000001CCC6420000-0x000001CCC6421000-memory.dmp
memory/4192-2-0x000001CCEC3E0000-0x000001CCEC3E1000-memory.dmp
memory/4192-1-0x000001CCEC3E0000-0x000001CCEC3E1000-memory.dmp
memory/4192-8-0x000001CCEC3E0000-0x000001CCEC3E1000-memory.dmp
memory/4192-7-0x000001CCEC3E0000-0x000001CCEC3E1000-memory.dmp
memory/4192-9-0x000001CCEC3E0000-0x000001CCEC3E1000-memory.dmp
memory/4192-6-0x000001CCEC3E0000-0x000001CCEC3E1000-memory.dmp
memory/4192-5-0x000001CCEC3E0000-0x000001CCEC3E1000-memory.dmp
memory/4192-4-0x000001CCEC3E0000-0x000001CCEC3E1000-memory.dmp
memory/4192-3-0x000001CCEC3E0000-0x000001CCEC3E1000-memory.dmp
memory/4192-13-0x000001CCEC3E0000-0x000001CCEC3E1000-memory.dmp
memory/4192-20-0x000001CCEC3E0000-0x000001CCEC3E1000-memory.dmp
memory/4192-19-0x000001CCEC3E0000-0x000001CCEC3E1000-memory.dmp
memory/4192-18-0x000001CCEC3E0000-0x000001CCEC3E1000-memory.dmp
memory/4192-16-0x000001CCEC3E0000-0x000001CCEC3E1000-memory.dmp
memory/4192-15-0x000001CCEC3E0000-0x000001CCEC3E1000-memory.dmp
memory/4192-11-0x000001CCEC3E0000-0x000001CCEC3E1000-memory.dmp
memory/4192-10-0x000001CCEC3E0000-0x000001CCEC3E1000-memory.dmp
memory/4192-17-0x000001CCEC3E0000-0x000001CCEC3E1000-memory.dmp
memory/4192-14-0x000001CCEC3E0000-0x000001CCEC3E1000-memory.dmp
memory/4192-12-0x000001CCEC3E0000-0x000001CCEC3E1000-memory.dmp
memory/4192-22-0x000001CCEC3E0000-0x000001CCEC3E1000-memory.dmp
memory/4192-34-0x000001CCEC3E0000-0x000001CCEC3E1000-memory.dmp
memory/4192-33-0x000001CCEC3E0000-0x000001CCEC3E1000-memory.dmp
memory/4192-32-0x000001CCEC3E0000-0x000001CCEC3E1000-memory.dmp
memory/4192-35-0x000001CCEC3E0000-0x000001CCEC3E1000-memory.dmp
memory/4192-31-0x000001CCEC3E0000-0x000001CCEC3E1000-memory.dmp
memory/4192-30-0x000001CCEC3E0000-0x000001CCEC3E1000-memory.dmp
memory/4192-29-0x000001CCEC3E0000-0x000001CCEC3E1000-memory.dmp
memory/4192-28-0x000001CCEC3E0000-0x000001CCEC3E1000-memory.dmp
memory/4192-27-0x000001CCEC3E0000-0x000001CCEC3E1000-memory.dmp
memory/4192-26-0x000001CCEC3E0000-0x000001CCEC3E1000-memory.dmp
memory/4192-25-0x000001CCEC3E0000-0x000001CCEC3E1000-memory.dmp
memory/4192-24-0x000001CCEC3E0000-0x000001CCEC3E1000-memory.dmp
memory/4192-23-0x000001CCEC3E0000-0x000001CCEC3E1000-memory.dmp
memory/4192-21-0x000001CCEC3E0000-0x000001CCEC3E1000-memory.dmp
memory/4804-37-0x0000000000280000-0x0000000000334000-memory.dmp
memory/4804-38-0x0000000000280000-0x0000000000334000-memory.dmp
memory/4804-39-0x0000000000280000-0x0000000000334000-memory.dmp
memory/4804-41-0x0000000000280000-0x0000000000334000-memory.dmp
memory/4804-42-0x0000000000280000-0x0000000000334000-memory.dmp