dfa1e3137a032ee8561a1cd5e1a0f71a10bebb36aef7c336c878638a9c1239ee

Analysis

max time kernel
148s
max time network
134s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
26/08/2026, 15:32

Target
dfa1e3137a032ee8561a1cd5e1a0f71a10bebb36aef7c336c878638a9c1239ee_unpacked.dll
Size 2.4MB
Sample260826-synfxsyydv
SHA256 dfa1e3137a032ee8561a1cd5e1a0f71a10bebb36aef7c336c878638a9c1239ee
MD5 1326019b243c58607993a6a51f731f90
SHA1 689885d3c5333a7a3c02b966336f58a6e8d08837
SHA512 3dd3de5934a286b05f1d21f8dd0564fd94d1a5478655853fbd1c7c7ffd051a0460e6a7b798e90b7c8314c87a73876a628344c1f2bc5f553bd97d24fdb05d4808
SSDEEP 49152:oMcTTOrgHiaMGC2G7MJnTeszGSPlxjodwg4:oMyTK2DDlg
TLSH
T15BC58EBB5A55308BE29EFC70D54793839EF0392CBF2DC5A7516EA63122759F10A2C312
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4060	rundll32.exe
4060	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\dfa1e3137a032ee8561a1cd5e1a0f71a10bebb36aef7c336c878638a9c1239ee_unpacked.dll,#1
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4060