770215719b268f1f73e603f0151f6f50019d77b526406fc90bd2144085148707

Analysis

max time kernel
148s
max time network
127s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
31/08/2026, 08:47

Target
770215719b268f1f73e603f0151f6f50019d77b526406fc90bd2144085148707.dll
Size 110KB
Sample260831-kqdmraycra
SHA256 770215719b268f1f73e603f0151f6f50019d77b526406fc90bd2144085148707
MD5 140a62ee25042e7589dbae099c54774c
SHA1 aae123a52b95930e04ab300d4de080798e55c7c5
SHA512 67cf7eed8eae85ebf11b8fc1c7d3e4e7844e75a424ad878fb88836525f456b6a37d45254305e9ec2164fdad4f6b1033cc92115f7ebd2a1cb5be60fb2b3b0a691
SSDEEP 3072:+gkqifhef0S1maIC8f5bg4jnj4D0+Ast:+gk9fKgBb/Pa
TLSH
T1C3B3029DF3B606BDE0424A78E0FC891DC13A9D6AF985E42C5650CDE569F0C729220EA7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/4616-0-0x00007FFC94A10000-0x00007FFC94A58000-memory.dmp	upx
behavioral2/memory/4616-2-0x00007FFC94A10000-0x00007FFC94A58000-memory.dmp	upx

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4616	rundll32.exe
4616	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\770215719b268f1f73e603f0151f6f50019d77b526406fc90bd2144085148707.dll,#1
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4616

memory/4616-0-0x00007FFC94A10000-0x00007FFC94A58000-memory.dmp

Download

memory/4616-2-0x00007FFC94A10000-0x00007FFC94A58000-memory.dmp

Download