Analysis
- max time kernel
148s - max time network
145s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
03/08/2026, 23:21
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
cygwin1.dll
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
cygwin1.dll
Resource
win11ltsc2024-20260710-en
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
iperf3.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral4
Sample
iperf3.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target cygwin1.dll
- Size 3.2MB
- Sample260803-3b6dbsssbx
- SHA256 b5f7b5beb7242b660888832f212ef70f2b922a8e7647e5004c2a62f9bfe09148
- MD5 3fc27a802b97eff784ee93b750dd4d33
- SHA1 8f9e743db0fa19cb7504bcdef1bb7e64460139c9
- SHA512 d8a12430cb83fcfe547286aa13ea814b1a5b853fbacbc1f39a9d119b5acdece0c09570240820edb39a076849804bc8e392ad93c3892fd0d0b4a29646f2cdf028
- SSDEEP 98304:OmHzTbxQ6K3/fHePUpZTn1u4VPSBtW5s6gdXd1nPY:Ja6KvfkK
- TLSH T16FE55C45B2EA1CDDCE27C2788297E33276717A610331AF2B2744D6712F62FD17B5AA10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 3 IoCs
description pid Process Token: SeRestorePrivilege 3360 rundll32.exe Token: SeBackupPrivilege 3360 rundll32.exe Token: SeDebugPrivilege 3360 rundll32.exe