bfb385ed30eead316bf65187ab5105392efc4e894b4d6a79adea74db39a73523

Analysis

user interaction
yes
max time kernel
8s
platform
windows11-21h2_x64
resource
win11-20260513-es
resource tags

arch:x64arch:x86image:win11-20260513-eslocale:es-esos:windows11-21h2-x64systemwindows
submitted
25/08/2026, 00:35

Target
winmm64.dll
Size 16KB
Sample260825-axbfvsdn8w
SHA256 bfb385ed30eead316bf65187ab5105392efc4e894b4d6a79adea74db39a73523
MD5 6ff8529a8d5e1564dee532dc0d43faa4
SHA1 c7e53d6e67e8b6aa718e76a0d4e5ae68717323ff
SHA512 530e87fd40948d1a2c0bd8a5dcdbb7c21412d9d65e1633fa4e69c397c5c55951b53980f9e343a69b0808e5b4b9ee40b18e849b88db66a9069c5924200044338e
SSDEEP 384:lif7k8eShWB2+H1jg5lS0XyACPdpZUN8U7ZSdCbraYP:lif3ekWY+HZIyvFp2SU7ZSdCb
TLSH
T113728DA40A94D59FC644E13B0C93842CDBB6A3D7E2626B13E7613F86C741B8A648DD53
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/memory/4532-0-0x00007FFD61ED0000-0x00007FFD61EE0000-memory.dmp	upx

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\winmm64.dll,#1
1⤵
PID:4532