Analysis

  • user interaction
    yes
  • max time kernel
    120s
  • max time network
    122s
  • platform
    windows10-ltsc_2021_x64
  • resource
    win10ltsc2021-20260513-en
  • resource tags

    arch:x64arch:x86image:win10ltsc2021-20260513-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
  • submitted
    23/08/2026, 03:18

General

  • Target
    Mrm3CoreR.dll
  • Size 58KB
  • Sample260823-dtsgradp81
  • SHA256 bf7e8be978aa9b3ed0d892b59aa6060c4d59f7dc7d73839033d9a4d83d97bd97
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\Mrm3CoreR.dll,#1
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:4820

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        memory/4820-0-0x0000026033760000-0x0000026033770000-memory.dmp

        memory/4820-2-0x0000000056510000-0x0000000056526000-memory.dmp

        memory/4820-1-0x00000000001A0000-0x00000000001B6000-memory.dmp