Analysis
- max time kernel
150s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
04/09/2026, 22:49
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
EliteSombra! V2.dll
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
EliteSombra! V2.dll
Resource
win11ltsc2024-20260710-en
2 signatures
150 seconds
General
- Target EliteSombra! V2.dll
- Size 33.3MB
- Sample260904-2rx68aywcw
- SHA256 17fed157fb6e8d53d5abd7611188f4e1ae27c34137e396d24a8d3544b6f6337f
- MD5 a8a0e2e2d412c2e66a857ee103b9e645
- SHA1 38f8fdb2d88bfa61f085cc450a18c65bc160f5be
- SHA512 baf58388b2e4759499d457fa6a7b46407fc8468db934603241abfbb35b70a71fd4afd7a5e0e353baaf6d7183fa993685e71b61e5d7a4b5ab684a5fb6661e366a
- SSDEEP 786432:ztWaqUL4N4pWjnw54PkkYnxSuiRJ4UvExYeqCLLmE0/ozp:zUULTpWjnhkrxURWUvExYy9R
- TLSH T1867723DA29D562D4D7C30660738E03DA61C1987D86FE5C383EC73C029A21DEB958ADB7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
- Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
pid Process 5056 rundll32.exe 5056 rundll32.exe - Suspicious behavior: EnumeratesProcesses 4 IoCs
pid Process 5056 rundll32.exe 5056 rundll32.exe 5056 rundll32.exe 5056 rundll32.exe