Analysis
- max time kernel
148s - max time network
129s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
10/09/2026, 06:12
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Updateac.dll
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
Updateac.dll
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
General
- Target Updateac.dll
- Size 536KB
- Sample260910-gyfwas11cx
- SHA256 87b6b24c06f99900a8aa579caedee1e402015884c925a98dcfb0fb38dfa2de22
- MD5 787fc1e6e741a36cfd41e0827f6c60a5
- SHA1 c9d43948197d0ea6eb66e429886add687b37c9d5
- SHA512 777e85b02e00140d8c9fe0cfd67f6d9e17b560322f104810bd841acc6ea69d222b080f24eb468e41d380e4b784c47a0fa39d3c6b40a3c6ce2e2111624ec05f52
- SSDEEP 12288:Zwy0Md3Tv0IrWhVynCmJfHoPC0OfKX/I17/fNMAO4M:ZJ0Md3Tv0IrWhVynRJYiI/wO
- TLSH T108C48E4BE6AB31BDD51BD534860344B6B611B8A70720AFDF0394D5722D36BE0863CB2E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Malware Config
Signatures
- Badlisted process makes network request 2 IoCs
Network request originating from process or tool commonly abused by malware.
flow pid Process 5 4716 rundll32.exe 6 4716 rundll32.exe - Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.