d1fdec2d2fb38eb21e69a9c93e55f0a42917f1d3bec19fb1e63d4a12cc0807ea

Analysis

max time kernel
148s
max time network
129s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
06/08/2026, 12:26

Target
ServiceInstance.dll
Size 231KB
Sample260806-pmpm3abl9v
SHA256 d1fdec2d2fb38eb21e69a9c93e55f0a42917f1d3bec19fb1e63d4a12cc0807ea
MD5 0689d044737e10bb9764f0e3d07def1f
SHA1 d350f6e5d712c389f863c98e0f2abc4caa5924b7
SHA512 9988e160dc300301d8d34cb24fde667271d0fda3eef2dabe96fe01fa5531479e3f140fb3633bd6e8e0dead2fa94b9ab934eab3833a2fbe8143324404629003b5
SSDEEP 3072:iUkNcnn+wsnEDSHHND6xXhLEkAGGf214F7tbTblJvian9QqUAjoY46Fx/Bb0Oa:jksBiwwND6/L9AGGf2kD7LohHO
TLSH
T113346B5A73A50CB9ED738139C8534E05E77278560771DAAF03A0425AEF2F7E0663BB21
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Drops file in System32 directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\system32\config.ini	rundll32.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\ServiceInstance.dll,#1
1⤵
- Drops file in System32 directory
PID:2372

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact