Analysis
- max time kernel
300s - max time network
299s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
24/08/2026, 00:46
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
HVNC64.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
300 seconds
Behavioral task
behavioral2
Sample
HVNC64.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
2 signatures
300 seconds
Behavioral task
behavioral3
Sample
ReflectiveHVNC64.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
300 seconds
Behavioral task
behavioral4
Sample
ReflectiveHVNC64.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
300 seconds
Behavioral task
behavioral5
Sample
svvhost.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
300 seconds
Behavioral task
behavioral6
Sample
svvhost.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
2 signatures
300 seconds
General
- Target HVNC64.dll
- Size 157KB
- Sample260824-a4pbasbr5t
- SHA256 c1634bbe012d27a8a8d6815f750b41c36c5249b79953d5fec6f36e21de1381e4
- MD5 9fcfd046f62d40f4a95dff00bea95931
- SHA1 b83d8fbb979bdbfa0b88dfa25be770f4d28ad40a
- SHA512 03d3a3282de4ee3a672eafca7adefe20e5792fb44199f1077e294d7adad13ed95ad79812a4ee3bb956082005a4e3e990491ed761fdb74d298b0e3bd5c31bd545
- SSDEEP 3072:J9DZz8QkzTloiFx63VUfWUp8G7x8oPGXf3mJ3odLwZD+p1:J918dTllxIUfWYx8ouXfmCENC
- TLSH T1FBF32907B65450AAE537C035CE979632E7B2384427201AEF6168EB752F337D2BB7A344
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Malware Config
Signatures
- Badlisted process makes network request 64 IoCs
Network request originating from process or tool commonly abused by malware.
flow pid Process 1 4232 rundll32.exe 2 4232 rundll32.exe 9 4232 rundll32.exe 10 4232 rundll32.exe 11 4232 rundll32.exe 12 4232 rundll32.exe 13 4232 rundll32.exe 14 4232 rundll32.exe 16 4232 rundll32.exe 17 4232 rundll32.exe 18 4232 rundll32.exe 19 4232 rundll32.exe 20 4232 rundll32.exe 21 4232 rundll32.exe 22 4232 rundll32.exe 23 4232 rundll32.exe 24 4232 rundll32.exe 25 4232 rundll32.exe 26 4232 rundll32.exe 28 4232 rundll32.exe 29 4232 rundll32.exe 30 4232 rundll32.exe 31 4232 rundll32.exe 32 4232 rundll32.exe 33 4232 rundll32.exe 34 4232 rundll32.exe 35 4232 rundll32.exe 36 4232 rundll32.exe 37 4232 rundll32.exe 38 4232 rundll32.exe 39 4232 rundll32.exe 40 4232 rundll32.exe 41 4232 rundll32.exe 42 4232 rundll32.exe 43 4232 rundll32.exe 44 4232 rundll32.exe 45 4232 rundll32.exe 46 4232 rundll32.exe 47 4232 rundll32.exe 48 4232 rundll32.exe 49 4232 rundll32.exe 50 4232 rundll32.exe 51 4232 rundll32.exe 52 4232 rundll32.exe 53 4232 rundll32.exe 54 4232 rundll32.exe 55 4232 rundll32.exe 56 4232 rundll32.exe 57 4232 rundll32.exe 58 4232 rundll32.exe 59 4232 rundll32.exe 60 4232 rundll32.exe 61 4232 rundll32.exe 62 4232 rundll32.exe 63 4232 rundll32.exe 64 4232 rundll32.exe 65 4232 rundll32.exe 66 4232 rundll32.exe 67 4232 rundll32.exe 68 4232 rundll32.exe 69 4232 rundll32.exe 70 4232 rundll32.exe 71 4232 rundll32.exe 72 4232 rundll32.exe - Suspicious behavior: EnumeratesProcesses 4 IoCs
pid Process 4232 rundll32.exe 4232 rundll32.exe 4232 rundll32.exe 4232 rundll32.exe