Analysis
- user interaction
yes - max time kernel
120s - max time network
122s - platform
windows10-ltsc_2021_x64 - resource
win10ltsc2021-20260513-en - resource tags
arch:x64arch:x86image:win10ltsc2021-20260513-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows - submitted
23/08/2026, 03:18
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Mrm3CoreR.dll
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
Mrm3CoreR.dll
Resource
win10ltsc2021-20260513-en
2 signatures
150 seconds
General
- Target Mrm3CoreR.dll
- Size 58KB
- Sample260823-dtsgradp81
- SHA256 bf7e8be978aa9b3ed0d892b59aa6060c4d59f7dc7d73839033d9a4d83d97bd97
- MD5 d7573ea697082b968b517ace93de21f1
- SHA1 bd061ab142d6e4871f62f12ef3422dde67f36473
- SHA512 760ae7e1dd4fce3f86e8609ef2ec0712c57f12412e232a0af693d313c8770d6a388554e9df33c01922822e8370176b621583bbba7a2c5f2277215048f30b8b1d
- SSDEEP 768:OETwN3FRsP9D3PdiJP67E13PVwzE2DBwTLEH7cu55xb3UqXgKjT:OETa3FuP9jmi0egvLE4u5PUSgK3
- TLSH T1A843A03EF2BD8329C72E17FD645AD7430EB7910B82A1AD1E10CE5D874B129C209A4DED
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 4820 rundll32.exe - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 4820 rundll32.exe