5a2b5e4b619e6fc565019f979c06de38407faf8ad91bd09fb818faf73a24819f

Login
Reports

Overview

overview

Static

static

Payload/XF...ed.dll

windows10-2004-x64

Payload/XF...ed.dll

windows11-ltsc_2024-x64

Payload/XF...rs.dll

windows10-2004-x64

Payload/XF...rs.dll

windows11-ltsc_2024-x64

Payload/XF...A.html

windows10-2004-x64

Payload/XF...A.html

windows11-ltsc_2024-x64

Payload/XF...rm.dll

windows10-2004-x64

Payload/XF...rm.dll

windows11-ltsc_2024-x64

Payload/XF...ms.dll

windows10-2004-x64

Payload/XF...ms.dll

windows11-ltsc_2024-x64

Payload/XF...rm.dll

windows10-2004-x64

Payload/XF...rm.dll

windows11-ltsc_2024-x64

Payload/XF...ng.dll

windows10-2004-x64

Payload/XF...ng.dll

windows11-ltsc_2024-x64

Payload/XF...cs.dll

windows10-2004-x64

Payload/XF...cs.dll

windows11-ltsc_2024-x64

Payload/XF...gs.dll

windows10-2004-x64

Payload/XF...gs.dll

windows11-ltsc_2024-x64

Payload/XF...es.dll

windows10-2004-x64

Payload/XF...es.dll

windows11-ltsc_2024-x64

Payload/XF...gs.dll

windows10-2004-x64

Payload/XF...gs.dll

windows11-ltsc_2024-x64

Payload/XF...er.dll

windows10-2004-x64

Payload/XF...er.dll

windows11-ltsc_2024-x64

Payload/XF...gs.dll

windows10-2004-x64

Payload/XF...gs.dll

windows11-ltsc_2024-x64

Payload/XF...ch.dll

windows10-2004-x64

Payload/XF...ch.dll

windows11-ltsc_2024-x64

Payload/XF...rp.dll

windows10-2004-x64

Payload/XF...rp.dll

windows11-ltsc_2024-x64

Payload/XF...ty.dll

windows10-2004-x64

Payload/XF...ty.dll

windows11-ltsc_2024-x64

Analysis

max time kernel
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
28/08/2026, 19:13

Sharing

Copy URL Twitter E-mail

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

Payload/XFScheduler.iOS.app/Aramark.Shared.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

Payload/XFScheduler.iOS.app/Aramark.Shared.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

Payload/XFScheduler.iOS.app/Behaviors.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

Payload/XFScheduler.iOS.app/Behaviors.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

Payload/XFScheduler.iOS.app/EULA.html

Resource

win10v2004-20260513-en

windows10-2004-x64

11 signatures

150 seconds

discovery

Behavioral task

behavioral6

Sample

Payload/XFScheduler.iOS.app/EULA.html

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

10 signatures

150 seconds

discovery

Behavioral task

behavioral7

Sample

Payload/XFScheduler.iOS.app/FFImageLoading.Forms.Platform.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

Payload/XFScheduler.iOS.app/FFImageLoading.Forms.Platform.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

Payload/XFScheduler.iOS.app/FFImageLoading.Forms.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

Payload/XFScheduler.iOS.app/FFImageLoading.Forms.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

Payload/XFScheduler.iOS.app/FFImageLoading.Platform.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

Payload/XFScheduler.iOS.app/FFImageLoading.Platform.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

Payload/XFScheduler.iOS.app/FFImageLoading.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

Payload/XFScheduler.iOS.app/FFImageLoading.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

Payload/XFScheduler.iOS.app/Microsoft.AppCenter.Analytics.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

Payload/XFScheduler.iOS.app/Microsoft.AppCenter.Analytics.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

Payload/XFScheduler.iOS.app/Microsoft.AppCenter.Analytics.iOS.Bindings.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

Payload/XFScheduler.iOS.app/Microsoft.AppCenter.Analytics.iOS.Bindings.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

Payload/XFScheduler.iOS.app/Microsoft.AppCenter.Crashes.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

Payload/XFScheduler.iOS.app/Microsoft.AppCenter.Crashes.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

Payload/XFScheduler.iOS.app/Microsoft.AppCenter.Crashes.iOS.Bindings.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

Payload/XFScheduler.iOS.app/Microsoft.AppCenter.Crashes.iOS.Bindings.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

Payload/XFScheduler.iOS.app/Microsoft.AppCenter.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

Payload/XFScheduler.iOS.app/Microsoft.AppCenter.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

Payload/XFScheduler.iOS.app/Microsoft.AppCenter.iOS.Bindings.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

Payload/XFScheduler.iOS.app/Microsoft.AppCenter.iOS.Bindings.dll

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

Payload/XFScheduler.iOS.app/Microsoft.AspNetCore.JsonPatch.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

Payload/XFScheduler.iOS.app/Microsoft.AspNetCore.JsonPatch.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

Payload/XFScheduler.iOS.app/Microsoft.CSharp.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral30

Sample

Payload/XFScheduler.iOS.app/Microsoft.CSharp.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

Payload/XFScheduler.iOS.app/Mono.Security.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

Payload/XFScheduler.iOS.app/Mono.Security.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target
Payload/XFScheduler.iOS.app/Aramark.Shared.dll
Size 149KB
Sample260828-xxa7essele
SHA256 5a2b5e4b619e6fc565019f979c06de38407faf8ad91bd09fb818faf73a24819f
MD5 26c64cc1917acdfc8b8ea2ba5daeef56
SHA1 350a7f459b67d42d67d2bfe54e140bf2cd9f30cf
SHA512 f960be586a99ed11895dfc9f7c9a2cc37596430fa05fd5b39aaf8909c207a5fb28abe5e0e89bc3e946a1dfda165fbadf556a4e4685921bd09877899251eebad6
SSDEEP 3072:w0YPckiYkn1NYhqaSXK8dRHtOWAkbL1XJ/C+uILUve16/iBPYcgHS:w0YPckw1ShB2jcZk/1XJa+xLUvay
TLSH
T11EE33F637BF8A51CF6F31FB4AAB2440A8B76BF2A1E11C87E0D96110E0462A44CD75777
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\Payload\XFScheduler.iOS.app\Aramark.Shared.dll,#1
1⤵
PID:1932

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads