Overview
overview
7Static
static
5libiconv-2.dll
windows10-2004-x64
1libiconv-2.dll
windows11-ltsc_2024-x64
1libidn2-0.dll
windows10-2004-x64
1libidn2-0.dll
windows11-ltsc_2024-x64
1libintl-8.dll
windows10-2004-x64
1libintl-8.dll
windows11-ltsc_2024-x64
1libpsl-5.dll
windows10-2004-x64
7libpsl-5.dll
windows11-ltsc_2024-x64
7libunistring-5.dll
windows10-2004-x64
1libunistring-5.dll
windows11-ltsc_2024-x64
1msvcp140.dll
windows10-2004-x64
1msvcp140.dll
windows11-ltsc_2024-x64
1psl.exe
windows10-2004-x64
6psl.exe
windows11-ltsc_2024-x64
6ucrtbase.dll
windows10-2004-x64
1vcruntime140.dll
windows10-2004-x64
1vcruntime140.dll
windows11-ltsc_2024-x64
1vcruntime140_1.dll
windows10-2004-x64
1vcruntime140_1.dll
windows11-ltsc_2024-x64
1Analysis
- max time kernel
150s - max time network
127s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
27/08/2026, 12:31
Static task
static1
Behavioral task
behavioral1
Sample
libiconv-2.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
libiconv-2.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
libidn2-0.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
libidn2-0.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
libintl-8.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
libintl-8.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
libpsl-5.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
libpsl-5.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
libunistring-5.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
libunistring-5.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
msvcp140.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
msvcp140.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
psl.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
psl.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
ucrtbase.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
vcruntime140.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral17
Sample
vcruntime140.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral18
Sample
vcruntime140_1.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral19
Sample
vcruntime140_1.dll
Resource
win11ltsc2024-20260709-en
General
- Target libpsl-5.dll
- Size 1.5MB
- Sample260827-pp7xesvcmc
- SHA256 e0fc5081765004587b52f138877494585239c7516affb3eaf530a07ce8bbbf23
- MD5 9901618613f960e1081a467db9ec9408
- SHA1 66c3cf918d9a591505b5c460d1cee49aa7e73515
- SHA512 b22c292d0491dbe026d9c12e2f1b4eb7a4865718649352315a3c02f77bfd890211054a24a668340e3097889dbb97a6871e4b72edb442208afc217a24d17b0690
- SSDEEP 49152:13s0SDMxwePLQdzXtGftaxQuyZ/skt2W:13qDM+mL8zUaauyBsS
- TLSH T1C47533DB5EC64107E64808F121A478E0DFEDCDE26D6C319AF907AD2CF09964D06E962F
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Executes dropped EXE 1 IoCs
pid Process 5868 DCRCVDrv.sys - Suspicious behavior: LoadsDriver 1 IoCs
pid Process 816 Process not Found
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\ProgramData\WinPslUpd\dpnhupnp.dll
- Size 36KB
- SHA256 e1e61831c7adf7bfce6cc4c2cc661f639bbe32ea23a85c855c9620b1335846e1
- MD5 9aa3c686e004fcdb18e0f13472f1f546
- SHA1 a3c47dd1202db27e8a2529d1725587766dbd7990
- SHA512 02d0087c5e2175371cf88a1d56e63ce8bc636652379ce827b4261692cd7ee7a79e4cbbb4c6981f003e5dd962429756cab762b4ca3676687934f18c1709086c7b
- SSDEEP 192:mNQYKapzTDPPwj4Wm2wxdzep3WoakyWGuW:I8kDgj4Wm2gqp3aWGuW
- TLSH T116F2F7867F9A38EAF472C63D84A32A5A9079F92043A247EF4351065D4C36FD06D34FE2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Temp\DCRCVDrv.sys
- Size 137KB
- SHA256 87e8d39db624f37d3e77aedf487a2dfd197f71a4730ea74f4e7a4341deaec2ff
- MD5 567c158ee0858f8e941d4ab7a6c18dbc
- SHA1 47d922b0fd5d704025d14ef98ded46e74830a423
- SHA512 f976cb8e9a2f0fc769e2e4345d18e1e9f01fdb1c4303eb20d94b625467e60ce20dd120e77a96d9ba498361dd6dc0066535404cb22cf99fc49607d1f35eaed2ab
- SSDEEP 3072:6pEFTp46B6ETbeP/ItLK9Di8/4BQaeJzP:Y8Tp46B6EOLgBQX
- TLSH T10CD33A12A36550A4E977E2B8C6B65263EFF37861133547CF03608A654F23BE4B93A3D1
- MD5 SHA1 SHA512 SSDEEP TLSH