Analysis
- user interaction
yes - max time kernel
74s - max time network
62s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
05/08/2026, 04:34
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
xldr.dll
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
xldr.dll
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
General
- Target xldr.dll
- Size 5.7MB
- Sample260805-e7mdbsybmc
- SHA256 2b5b2f22a962e65e04b710ba401d480dac5f882234620ee1e74b620ddb5deaff
- MD5 782e90be6f69557abfb80f0061f07d16
- SHA1 2c45e6390e814417e8f0d3dc1c1a00d352ded1a3
- SHA512 1542e60fdf6b52db397efdea656ebe4d79440c5a23c85d8ffb6c80d9a496f39abc3b0e92ddcc9fa23f3fcfff1c38470d37834dfb8900816c43a04d4522743530
- SSDEEP 98304:qU8fS/FU4FFPBLcGlTwYxEuuBEzn6N0dk7orTR4fPMtWLQ5i8140ch:ppF9xcWV4Eb6N7kxWLQ5c
- TLSH T1B056238078D616B0C6878A33D1852EFAFC4134C17D7B9A0F5FE2295C2971D16DEA2F29
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
- Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
pid Process 2552 rundll32.exe 2552 rundll32.exe - Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 2552 rundll32.exe 2552 rundll32.exe