Analysis
- max time kernel
148s - max time network
135s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
04/08/2026, 04:35
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
7f14025e045befd2154fee7594c53a0ea2e5a25700f7a30058147be3b5fc6aa5.dll
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
7f14025e045befd2154fee7594c53a0ea2e5a25700f7a30058147be3b5fc6aa5.dll
Resource
win11ltsc2024-20260710-en
3 signatures
150 seconds
General
- Target 7f14025e045befd2154fee7594c53a0ea2e5a25700f7a30058147be3b5fc6aa5.dll
- Size 6.6MB
- Sample260804-e7t36sfq4s
- SHA256 7f14025e045befd2154fee7594c53a0ea2e5a25700f7a30058147be3b5fc6aa5
- MD5 3c9d20277dc8a0335988130c427f7fa3
- SHA1 7eb6a4a1943b02c76351151b08b4c65abfc24763
- SHA512 fa6b2829a8693f19e2310a77f5b7bb12d6724e55ded9d2704f1674e4435eaf54c594ccac028f54dbfb8e988bfdebc774f1a05568c12256976eae6468cee905de
- SSDEEP 49152:/woIYQq+bdHZItvKbnv5bCRKVtqqtT5D+qtb099KRT39U7JXBluv01+J5JzoOe7a:/Nsxdtqq/+6b09kRz9cBlC0OugXV
- TLSH T193666B0BBE449565C099DA3DC87B72497678B84E873033D32E726E712F327D25A39B90
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Malware Config
Signatures
- Badlisted process makes network request 2 IoCs
Network request originating from process or tool commonly abused by malware.
flow pid Process 8 2436 rundll32.exe 9 2436 rundll32.exe - Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
pid Process 2436 rundll32.exe - Suspicious behavior: EnumeratesProcesses 6 IoCs
pid Process 2436 rundll32.exe 2436 rundll32.exe 2436 rundll32.exe 2436 rundll32.exe 2436 rundll32.exe 2436 rundll32.exe
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\7f14025e045befd2154fee7594c53a0ea2e5a25700f7a30058147be3b5fc6aa5.dll,#11⤵
- Badlisted process makes network request
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
PID:2436