cda3a2211a6e263ec5b8458f424ac47245e49cfb06fb2c417ea9094505efbf06

Resubmissions

10/08/2026, 12:49

10/08/2026, 12:45

user interaction
yes
max time kernel
149s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/08/2026, 12:45

Target
sleep_study_top_offenders_summary_2026-06-14_15_51_32_171.dll
Size 34KB
Sample260810-py2rrshn3x
SHA256 cda3a2211a6e263ec5b8458f424ac47245e49cfb06fb2c417ea9094505efbf06
MD5 2192ea3aee8ed2723538285608a06a2a
SHA1 c738fceefef96304b0ab1e98e2a881ec3bdc670a
SHA512 0a1f8098a2f60476942875cb040f9a927f4e721b7ee15cace4b59e64556ab3f008c52a187e489e1f2e623d059d616c151e389271e0bdc339c608ed9b1c8cf89e
SSDEEP 768:Czgbx/q4IgPZR7Xh6+g041P5Fo/I2scrj8MYzlz3s7ccJcXbAC++w:qgFSIPZlXh6+g041P5K/I2VYMY5gzcLX
TLSH
T135F25B26F8E988F5C57DC038C5972D2BE1F3B8189220A7DF13E0855B2F92A70761D261
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of WriteProcessMemory 1 IoCs

description	pid	Process	procid_target
PID 2184 wrote to memory of 2484	2184	cmd.exe	107

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\sleep_study_top_offenders_summary_2026-06-14_15_51_32_171.dll,#1
1⤵
PID:4296

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:3164

C:\Windows\system32\cmd.exe
"C:\Windows\system32\cmd.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2184
- C:\Windows\System32\rundll32.exe
  rundll32.exe C:\Users\Admin\Desktop\linera.dll
  2⤵
  PID:2484