Analysis
- max time kernel
60s - max time network
22s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
08/08/2026, 04:41
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
FrenchPacket.dll
Resource
win10v2004-20260513-en
2 signatures
60 seconds
Behavioral task
behavioral2
Sample
FrenchPacket.dll
Resource
win11ltsc2024-20260710-en
3 signatures
60 seconds
General
- Target FrenchPacket.dll
- Size 3.7MB
- Sample260808-fbcdxszgrb
- SHA256 40b9bdd72d2a5eb9ebccc27cfa9093508029337bb9b61ec4416f9a59abb9d320
- MD5 cb1d604ce97f249fabb9be4777b56e2d
- SHA1 983a9dec4ffff78a4d70a73ebd6a1b5169f63cde
- SHA512 506712108f1ece9c2e15063dff73300d35aca0e7b32d9c89d3c9acd7a8e84dd9e455c8778df7b681a5f251e84d8529f1c65d4c5de5275c72ffa3007155a10e58
- SSDEEP 49152:JQ+oPdh+uL/boIgWBwwNUx0R2yk4oTx7ATTgZJTiyT4z+zjgihKSMWJo3Zz450U9:ua0f
- TLSH T184065246DAB381E0D6B9E138B252722BF9613C5DC738A7E79BD05B0617A17D0E5BE300
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 10 IoCs
pid Process 3576 rundll32.exe 3576 rundll32.exe 3576 rundll32.exe 3576 rundll32.exe 3576 rundll32.exe 3576 rundll32.exe 3576 rundll32.exe 3576 rundll32.exe 3576 rundll32.exe 3576 rundll32.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: 33 2648 AUDIODG.EXE Token: SeIncBasePriorityPrivilege 2648 AUDIODG.EXE - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 3576 rundll32.exe
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\FrenchPacket.dll,#11⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:3576
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x00000000000004F0 0x00000000000004F81⤵
- Suspicious use of AdjustPrivilegeToken
PID:2648