Analysis
- max time kernel
148s - max time network
152s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
11/08/2026, 22:32
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
779d5a88e217ff32e029d08543f76dd0513a660283db1caa567821c45d64d3ce.bin.dll
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
779d5a88e217ff32e029d08543f76dd0513a660283db1caa567821c45d64d3ce.bin.dll
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
General
- Target 779d5a88e217ff32e029d08543f76dd0513a660283db1caa567821c45d64d3ce.bin.dll
- Size 5.9MB
- Sample260811-2f9e4sha97
- SHA256 779d5a88e217ff32e029d08543f76dd0513a660283db1caa567821c45d64d3ce
- MD5 c3d29f810938136c3b9a4129ace70927
- SHA1 5f3af22cfd8fc26572bf02eda8cc83e931565181
- SHA512 984437838f665fa0d8f191bd2ba1cbf0fd658c9b8bdcc57f7cf06c25bad3360af6ac52dcd08cf272cd82eb6c0060cc6d0053470ac38c5cba92cb0a253c4ec43a
- SSDEEP 98304:TH+PN9MWArl/DTnM/yMk2WQs2um7GHQlhcEQ:TS9M/oy+q
- TLSH T1C4566C07EA525E3CC4E6EB3491764251BAA5780897393FE32E50AAF03F7B3D15978B01
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Malware Config
Signatures
- Badlisted process makes network request 3 IoCs
Network request originating from process or tool commonly abused by malware.
flow pid Process 3 4920 rundll32.exe 4 4920 rundll32.exe 5 4920 rundll32.exe - Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
pid Process 4920 rundll32.exe - Suspicious behavior: EnumeratesProcesses 6 IoCs
pid Process 4920 rundll32.exe 4920 rundll32.exe 4920 rundll32.exe 4920 rundll32.exe 4920 rundll32.exe 4920 rundll32.exe
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\779d5a88e217ff32e029d08543f76dd0513a660283db1caa567821c45d64d3ce.bin.dll,#11⤵
- Badlisted process makes network request
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
PID:4920