Analysis

  • max time kernel
    598s
  • max time network
    386s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260513-en
  • resource tags

    arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    02/08/2026, 17:03

General

  • Target
    AddonWeapons Builder/pythonnet/runtime/Python.Runtime.dll
  • Size 435KB
  • Sample260802-vkpg6sdj2x
  • SHA256 648e6b415be8f45018af71f377aa3a97772799b353ac3a5e8612a99313de4907
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe "C:\Users\Admin\AppData\Local\Temp\AddonWeapons Builder\pythonnet\runtime\Python.Runtime.dll",#1
    1⤵
    • System Time Discovery
    PID:3388

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads