5f70bf18a086007016e948b04aed3b82103a36bea41755b6cddfaf10ace3c6ef | Triage™

Analysis

max time kernel
148s
max time network
133s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/08/2026, 12:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
test.cpl
Size 1024B
Sample260802-phyeeasgkd
SHA256 5f70bf18a086007016e948b04aed3b82103a36bea41755b6cddfaf10ace3c6ef
MD5 0f343b0931126a20f133d67c2b018a3b
SHA1 60cacbf3d72e1e7834203da608037b1bf83b40e8
SHA512 8efb4f73c5655351c444eb109230c556d39e2c7624e9c11abc9e3fb4b9b9254218cc5085b454a9698d085cfa92198491f07a723be4574adc70617b73eb0b6461
MD5 SHA1 SHA512

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 5844 wrote to memory of 5500	5844	control.exe	89

C:\Windows\system32\control.exe
control.exe C:\Users\Admin\AppData\Local\Temp\test.cpl
1⤵
- Suspicious use of WriteProcessMemory
PID:5844
- C:\Windows\system32\rundll32.exe
  "C:\Windows\system32\rundll32.exe" Shell32.dll,Control_RunDLL C:\Users\Admin\AppData\Local\Temp\test.cpl
  2⤵
  PID:5500

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads