2b6a193ac3345175098c9067a63ba035cd6325715407f936180986cfcdfa8cae

Analysis

max time kernel
148s
max time network
152s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
25/08/2026, 14:30

Target
2b6a193ac3345175098c9067a63ba035cd6325715407f936180986cfcdfa8cae.dll
Size 3.1MB
Sample260825-rt82dstcrg
SHA256 2b6a193ac3345175098c9067a63ba035cd6325715407f936180986cfcdfa8cae
MD5 2214abd1168751b02abd66e23217ef45
SHA1 abb29eee198f2066c33e8a714438ecd18db221a0
SHA512 09d0f8a6d6be5fb5e305d73c916c7636fb4c05ef1a2eb67fb0c6b36d06112b8f4d3b1ab7f1dafc38fa9d6ad5ec5bf164f1d5b0775bec01301b599562daa8a3ce
SSDEEP 49152:P9KpI8cBa0kj6BK0x3TiMQclkGo2PXk6rkwuuWG/+WizBedfb77N3SnKrKB+n:P9m29xx3Tiqt06ox6+z2rNNrKon
TLSH
T149E523E5B6D739F6D023CBF4DA62A1AD70393F505F635C5F3B8929014E62228973A390
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 4 IoCs

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2b6a193ac3345175098c9067a63ba035cd6325715407f936180986cfcdfa8cae.dll,#1
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:5824

memory/5824-1-0x00007FFBE2150000-0x00007FFBE2152000-memory.dmp

Download

memory/5824-2-0x00007FFBBF390000-0x00007FFBBF8AE000-memory.dmp

Download