Overview
overview
8Static
static
3111.zip
windows11-ltsc_2024-x64
8111/compile.bat
windows11-ltsc_2024-x64
3111/compil...er.bat
windows11-ltsc_2024-x64
3111/kdmapp...lp.dll
windows11-ltsc_2024-x64
1111/kdmapp...rv.dll
windows11-ltsc_2024-x64
6111/kdmapp...ld.sys
windows11-ltsc_2024-x64
8111/loader...er.exe
windows11-ltsc_2024-x64
8111/spoofer.sys
windows11-ltsc_2024-x64
8111/unload.exe
windows11-ltsc_2024-x64
8Analysis
- max time kernel
899s - max time network
487s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
03/09/2026, 21:46
Static task
static1
Behavioral task
behavioral1
Sample
111.zip
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral2
Sample
111/compile.bat
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
111/compile_loader.bat
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral4
Sample
111/kdmapper-source/kdmapper-master/DbgHelp/dbghelp.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
111/kdmapper-source/kdmapper-master/DbgHelp/symsrv.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral6
Sample
111/kdmapper-source/kdmapper-master/HelloWorld.sys
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
111/loader_spoofer.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral8
Sample
111/spoofer.sys
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
111/unload.exe
Resource
win11ltsc2024-20260709-en
General
- Target 111/kdmapper-source/kdmapper-master/DbgHelp/dbghelp.dll
- Size 2.1MB
- Sample260903-1mtskafr9s
- SHA256 2ed18fdb0bfea3c3297230ee57ba7e05a23c09bc929bf1aaf23dcd2d83bf5024
- MD5 21454155086ee542ca313157a4aba0f7
- SHA1 bd8bc1f4905308c8db664449545ea004cf55070b
- SHA512 ac48c0e05219f2a77b5eda8a5086f8dd08ed36dea4d4f8d6158a343274336be7922aa2f8c96940254ada5acb24aad5e2c5fce914d7628ccde48e0d4d1ec59479
- SSDEEP 24576:UC5peoantYTNCFNgmYrrDaPFmWzbuNtI2dFDwDJonMFt6TmFHpgw73JfhQf:UC5koantYTUzgmYX0mWiIKDwDaD0awZO
- TLSH T1AAA57B1B56E800A8D67AE23DD267560BD7F274060321A7DF1260876E6F33FE51ABE311
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\111\kdmapper-source\kdmapper-master\DbgHelp\dbghelp.dll,#11⤵PID:1188
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵PID:4336
-
C:\Windows\System32\SecurityHealthHost.exe\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding1⤵PID:4812