Overview
overview
3Static
static
3Varios arc...43.dll
windows10-2004-x64
1Varios arc...43.dll
windows11-ltsc_2024-x64
1Varios arc...er.exe
windows10-2004-x64
3Varios arc...er.exe
windows11-ltsc_2024-x64
1Varios arc...43.dll
windows10-2004-x64
1Varios arc...43.dll
windows11-ltsc_2024-x64
1Varios arc...43.dll
windows10-2004-x64
1Varios arc...43.dll
windows11-ltsc_2024-x64
1Varios arc...43.dll
windows10-2004-x64
1Varios arc...43.dll
windows11-ltsc_2024-x64
1Analysis
- max time kernel
150s - max time network
140s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
27/08/2026, 21:49
Static task
static1
Behavioral task
behavioral1
Sample
Varios archivos/Release/D3DCompiler_43.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral2
Sample
Varios archivos/Release/D3DCompiler_43.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral3
Sample
Varios archivos/Release/NVDisplay.Container.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral4
Sample
Varios archivos/Release/NVDisplay.Container.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral5
Sample
Varios archivos/Release/d3dx10_43.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral6
Sample
Varios archivos/Release/d3dx10_43.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral7
Sample
Varios archivos/Release/d3dx11_43.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral8
Sample
Varios archivos/Release/d3dx11_43.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral9
Sample
Varios archivos/Release/d3dx9_43.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral10
Sample
Varios archivos/Release/d3dx9_43.dll
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
General
- Target Varios archivos/Release/NVDisplay.Container.exe
- Size 3.6MB
- Sample260827-1pre8azyev
- SHA256 50fb82c91d081dd54ddad8e248c85b3aa5c44180fb75c285f43c58f6351b7564
- MD5 b61836f155fc1b85662a477b27a9c125
- SHA1 a7095069ac0605095540b0a3024c45cca18c81bb
- SHA512 830037f753f999cb13d52bcd6588f67700c4a7a1313c569a0f78450be1c27dde155ff38bdf5f194730507f0ea1b6dbbfaddd379d2a69386f13f7acc4fb4371ae
- SSDEEP 49152:LYsYB4vrOQTAje1TpQgfpsoPRQ3qKVh/qNwffAj3g/bTqSk6TnXZfQ/:UFSrXTnTSJ/lgQ/6Sg
- TLSH T1FB06CF0BE3A345E8D6629178C523A353E3B2B418173187DF2BE14976EF866F05EB9701
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 24 IoCs
description pid Process Token: SeIncreaseQuotaPrivilege 2584 NVDisplay.Container.exe Token: SeSecurityPrivilege 2584 NVDisplay.Container.exe Token: SeTakeOwnershipPrivilege 2584 NVDisplay.Container.exe Token: SeLoadDriverPrivilege 2584 NVDisplay.Container.exe Token: SeSystemProfilePrivilege 2584 NVDisplay.Container.exe Token: SeSystemtimePrivilege 2584 NVDisplay.Container.exe Token: SeProfSingleProcessPrivilege 2584 NVDisplay.Container.exe Token: SeIncBasePriorityPrivilege 2584 NVDisplay.Container.exe Token: SeCreatePagefilePrivilege 2584 NVDisplay.Container.exe Token: SeBackupPrivilege 2584 NVDisplay.Container.exe Token: SeRestorePrivilege 2584 NVDisplay.Container.exe Token: SeShutdownPrivilege 2584 NVDisplay.Container.exe Token: SeDebugPrivilege 2584 NVDisplay.Container.exe Token: SeSystemEnvironmentPrivilege 2584 NVDisplay.Container.exe Token: SeChangeNotifyPrivilege 2584 NVDisplay.Container.exe Token: SeRemoteShutdownPrivilege 2584 NVDisplay.Container.exe Token: SeUndockPrivilege 2584 NVDisplay.Container.exe Token: SeManageVolumePrivilege 2584 NVDisplay.Container.exe Token: SeImpersonatePrivilege 2584 NVDisplay.Container.exe Token: SeCreateGlobalPrivilege 2584 NVDisplay.Container.exe Token: 33 2584 NVDisplay.Container.exe Token: 34 2584 NVDisplay.Container.exe Token: 35 2584 NVDisplay.Container.exe Token: 36 2584 NVDisplay.Container.exe