85c60e58e827d88421e0c3647da9897d33af13f436678df7f4ed433610760052

Analysis

max time kernel
149s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
25/08/2026, 18:14

Target
libpsl-5.dll
Size 5.4MB
Sample260825-wvb59sac92
SHA256 85c60e58e827d88421e0c3647da9897d33af13f436678df7f4ed433610760052
MD5 e3d538692c3578e119a03f302ca1b1ce
SHA1 90e11f3ff521c0bd82368b6a505d9c9cfdab9f57
SHA512 1fa8011ea7718e76adde3739fbb88f11f06333285220be952f7855fd2bd71dd68f93efd2b6819033d0aa0d6ace0bf4ad6e567ceb415916fd63ff8dd76cadef89
SSDEEP 98304:0N0Xp/C9YEE7720ku0JsZzcGdum8Zb6+65Z:0N0XqYEE772sdZzcGzT+0
TLSH
T169468C4F73876AADC016C535D617B632C162F8220B7581CBA996E6FE1E73B804E3DB11
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Executes dropped EXE 1 IoCs

pid	Process
4584	DCRCVDrv.sys

Suspicious behavior: LoadsDriver 1 IoCs

pid	Process
660	Process not Found

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\libpsl-5.dll,#1
1⤵
PID:4448

C:\Windows\Temp\DCRCVDrv.sys
C:\Windows\Temp\DCRCVDrv.sys
1⤵
- Executes dropped EXE
PID:4584

DCRCVDrv.sys

Path C:\Windows\Temp\DCRCVDrv.sys
Size 137KB
SHA256 87e8d39db624f37d3e77aedf487a2dfd197f71a4730ea74f4e7a4341deaec2ff
MD5 567c158ee0858f8e941d4ab7a6c18dbc
SHA1 47d922b0fd5d704025d14ef98ded46e74830a423
SHA512 f976cb8e9a2f0fc769e2e4345d18e1e9f01fdb1c4303eb20d94b625467e60ce20dd120e77a96d9ba498361dd6dc0066535404cb22cf99fc49607d1f35eaed2ab
SSDEEP 3072:6pEFTp46B6ETbeP/ItLK9Di8/4BQaeJzP:Y8Tp46B6EOLgBQX
TLSH
T10CD33A12A36550A4E977E2B8C6B65263EFF37861133547CF03608A654F23BE4B93A3D1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/4584-2-0x0000000000010000-0x000000000003D000-memory.dmp

Download