Analysis
- geolocation tags
nanew-jerseynorth-americaunited-statesususa - user interaction
yes - max time kernel
899s - max time network
463s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
07/08/2026, 02:33
Static task
static1
Behavioral task
behavioral1
Sample
RLPack_by_LAC.zip
Resource
win11-20260513-en
0 signatures
900 seconds
Behavioral task
behavioral2
Sample
RLPack_by_LAC.zip
Resource
win11ltsc2024-20260709-en
0 signatures
900 seconds
General
- Target RLPack_by_LAC.zip
- Size 36B
- Sample260807-c1tsqaep6z
- SHA256 c3fa59901d56ce8a95a303b22fd119cb94abf4f43c4f6d60a81fd78b7d00fa65
- MD5 a1ca4bebcd03fafbe2b06a46a694e29a
- SHA1 ffc88125007c23ff6711147a12f9bba9c3d197ed
- SHA512 6fe1730bf2a6bba058c5e1ef309a69079a6acca45c0dbca4e7d79c877257ac08e460af741459d1e335197cf4de209f2a2997816f2a2a3868b2c8d086ef789b0e
- MD5 SHA1 SHA512
Score
1/10
Malware Config
Signatures
Processes
-
C:\Windows\Explorer.exeC:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\RLPack_by_LAC.zip1⤵PID:1188
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:3012
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵PID:4960
-
C:\Windows\System32\SecurityHealthHost.exe\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding1⤵PID:5540