a7e248c3e6f25f4673e2006fa77f4a4322a3c74c2652dcc395178329feb7ff28

Analysis

max time kernel
150s
max time network
115s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
22/08/2026, 18:40

Target
Debug/net8.0-windows/runtimes/win/lib/net7.0/System.Management.dll
Size 288KB
Sample260822-xbchcsszhs
SHA256 a7e248c3e6f25f4673e2006fa77f4a4322a3c74c2652dcc395178329feb7ff28
MD5 76e0aaa7182e77403bf6fe2af8d90f28
SHA1 d013c5d649f9ebce5bee1c8b774f3290b1f1f532
SHA512 8e161a375fe174d9b203c2a098c92aff411d8521eef133d5174ae7409c394157f7a067c2a9dfe3f76cb02acbed52c33a11579b9a1cbee75e4092e6487d1a7bc1
SSDEEP 6144:TMbKUVLmD7HP9ab+T5sBFzPnQpEZFAc2Q:45VL2Z++tw92Q
TLSH
T10654195033F841D4C47FAABA903161958FB4736BA60EDF9E1452FCED1AF1B81960326B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

System Time Discovery

pid	Process
1860	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\Debug\net8.0-windows\runtimes\win\lib\net7.0\System.Management.dll,#1
1⤵
- System Time Discovery
PID:1860

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Time Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact