Analysis

  • max time kernel
    149s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    04/08/2026, 06:12

General

  • Target
    libcairo-2.dll
  • Size 1.2MB
  • Sample260804-gx7ydsec44
  • SHA256 10cb3ddfb67ef352365d5cdf1fce0376693d2d6e90aefefee41b3c0c5ce363e4
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\libcairo-2.dll,#1
    1⤵
      PID:5056

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          memory/5056-0-0x00007FF947AE0000-0x00007FF947C13000-memory.dmp

          memory/5056-5-0x00007FF94C000000-0x00007FF94C046000-memory.dmp

          memory/5056-18-0x00007FF93A800000-0x00007FF93A8B6000-memory.dmp

          memory/5056-17-0x00007FF93A8C0000-0x00007FF93AA41000-memory.dmp

          memory/5056-16-0x00007FF947980000-0x00007FF9479AC000-memory.dmp

          memory/5056-15-0x00007FF948140000-0x00007FF94816B000-memory.dmp

          memory/5056-14-0x00007FF93AA50000-0x00007FF93AB6E000-memory.dmp

          memory/5056-13-0x00007FF93AB70000-0x00007FF93ACE4000-memory.dmp

          memory/5056-12-0x00007FF948460000-0x00007FF94847A000-memory.dmp

          memory/5056-11-0x00007FF9487C0000-0x00007FF9487D6000-memory.dmp

          memory/5056-10-0x00007FF949270000-0x00007FF9492A7000-memory.dmp

          memory/5056-9-0x00007FF9479B0000-0x00007FF947A02000-memory.dmp

          memory/5056-8-0x00007FF94E2D0000-0x00007FF94E2E5000-memory.dmp

          memory/5056-7-0x00007FF94C1B0000-0x00007FF94C1D5000-memory.dmp

          memory/5056-6-0x00007FF93ACF0000-0x00007FF93AF4D000-memory.dmp

          memory/5056-4-0x00007FF947880000-0x00007FF94793A000-memory.dmp

          memory/5056-3-0x00007FF947A10000-0x00007FF947AD8000-memory.dmp

          memory/5056-2-0x00007FF94C1E0000-0x00007FF94C23B000-memory.dmp

          memory/5056-1-0x00007FF94C240000-0x00007FF94C26B000-memory.dmp