Overview
overview
7Static
static
5libiconv-2.dll
windows10-2004-x64
1libiconv-2.dll
windows11-ltsc_2024-x64
1libidn2-0.dll
windows10-2004-x64
1libidn2-0.dll
windows11-ltsc_2024-x64
1libintl-8.dll
windows10-2004-x64
1libintl-8.dll
windows11-ltsc_2024-x64
1libpsl-5.dll
windows10-2004-x64
7libpsl-5.dll
windows11-ltsc_2024-x64
7libunistring-5.dll
windows10-2004-x64
1libunistring-5.dll
windows11-ltsc_2024-x64
1msvcp140.dll
windows10-2004-x64
1msvcp140.dll
windows11-ltsc_2024-x64
1psl.exe
windows10-2004-x64
6psl.exe
windows11-ltsc_2024-x64
6ucrtbase.dll
windows10-2004-x64
1vcruntime140.dll
windows10-2004-x64
1vcruntime140.dll
windows11-ltsc_2024-x64
1vcruntime140_1.dll
windows10-2004-x64
1vcruntime140_1.dll
windows11-ltsc_2024-x64
1Analysis
- max time kernel
150s - max time network
134s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
27/08/2026, 12:31
Static task
static1
Behavioral task
behavioral1
Sample
libiconv-2.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
libiconv-2.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
libidn2-0.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
libidn2-0.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
libintl-8.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
libintl-8.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
libpsl-5.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
libpsl-5.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
libunistring-5.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
libunistring-5.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
msvcp140.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
msvcp140.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
psl.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
psl.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
ucrtbase.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
vcruntime140.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral17
Sample
vcruntime140.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral18
Sample
vcruntime140_1.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral19
Sample
vcruntime140_1.dll
Resource
win11ltsc2024-20260709-en
General
- Target libpsl-5.dll
- Size 1.5MB
- Sample260827-pp7xesvcmc
- SHA256 e0fc5081765004587b52f138877494585239c7516affb3eaf530a07ce8bbbf23
- MD5 9901618613f960e1081a467db9ec9408
- SHA1 66c3cf918d9a591505b5c460d1cee49aa7e73515
- SHA512 b22c292d0491dbe026d9c12e2f1b4eb7a4865718649352315a3c02f77bfd890211054a24a668340e3097889dbb97a6871e4b72edb442208afc217a24d17b0690
- SSDEEP 49152:13s0SDMxwePLQdzXtGftaxQuyZ/skt2W:13qDM+mL8zUaauyBsS
- TLSH T1C47533DB5EC64107E64808F121A478E0DFEDCDE26D6C319AF907AD2CF09964D06E962F
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Executes dropped EXE 1 IoCs
pid Process 4472 DCRCVDrv.sys - Suspicious behavior: LoadsDriver 1 IoCs
pid Process 664 Process not Found
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\ProgramData\WinPslUpd\dpnhupnp.dll
- Size 10KB
- SHA256 7cf4535e85ec02365c54bf460992344fe1e319381e794e51a7ce0f9cb0438929
- MD5 ba32bb24b7da23bd7ee7ae4b576338cd
- SHA1 17731367250361c6b1aaf24f988b8dd1150b1e92
- SHA512 4317c083c491e74ef7e1ad30d79164b3d6ba360f3b83a88d220b21385837049a33c3023c5f9d10c42980c45fecc747d271263242976435abab7612c26e486be4
- SSDEEP 96:FjxR3HUNj9fs2Qz6IDyBTFdesMH3aLbJ0lq5/sEWRuWwl:FtmzzyyBJdQH3aXSlSWRuW
- TLSH T1CE22A80AB7B809ADF06602F8876A5D5AE1757110536266EF0230C35D3F2EBD1BD34BA2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Temp\DCRCVDrv.sys
- Size 137KB
- SHA256 87e8d39db624f37d3e77aedf487a2dfd197f71a4730ea74f4e7a4341deaec2ff
- MD5 567c158ee0858f8e941d4ab7a6c18dbc
- SHA1 47d922b0fd5d704025d14ef98ded46e74830a423
- SHA512 f976cb8e9a2f0fc769e2e4345d18e1e9f01fdb1c4303eb20d94b625467e60ce20dd120e77a96d9ba498361dd6dc0066535404cb22cf99fc49607d1f35eaed2ab
- SSDEEP 3072:6pEFTp46B6ETbeP/ItLK9Di8/4BQaeJzP:Y8Tp46B6EOLgBQX
- TLSH T10CD33A12A36550A4E977E2B8C6B65263EFF37861133547CF03608A654F23BE4B93A3D1
- MD5 SHA1 SHA512 SSDEEP TLSH