Overview
overview
3Static
static
3cygX11-6.dll
windows10-2004-x64
1cygX11-6.dll
windows11-ltsc_2024-x64
1cygXau-6.dll
windows10-2004-x64
1cygXau-6.dll
windows11-ltsc_2024-x64
1cygXdmcp-6.dll
windows10-2004-x64
1cygXdmcp-6.dll
windows11-ltsc_2024-x64
1cygcom_err-2.dll
windows10-2004-x64
1cygcom_err-2.dll
windows11-ltsc_2024-x64
1cygcrypto-1.0.0.dll
windows10-2004-x64
1cygcrypto-1.0.0.dll
windows11-ltsc_2024-x64
1cygcrypto-1.1.dll
windows10-2004-x64
1cygcrypto-1.1.dll
windows11-ltsc_2024-x64
1cygfreerdp2-2.dll
windows10-2004-x64
1cygfreerdp2-2.dll
windows11-ltsc_2024-x64
1cyggcc_s-seh-1.dll
windows10-2004-x64
1cyggcc_s-seh-1.dll
windows11-ltsc_2024-x64
1cyggcrypt-20.dll
windows10-2004-x64
1cyggcrypt-20.dll
windows11-ltsc_2024-x64
1cyggpg-error-0.dll
windows10-2004-x64
1cyggpg-error-0.dll
windows11-ltsc_2024-x64
1cyggssapi_krb5-2.dll
windows10-2004-x64
1cyggssapi_krb5-2.dll
windows11-ltsc_2024-x64
1cygiconv-2.dll
windows10-2004-x64
1cygiconv-2.dll
windows11-ltsc_2024-x64
1cygidn-11.dll
windows10-2004-x64
1cygidn-11.dll
windows11-ltsc_2024-x64
1cygintl-8.dll
windows10-2004-x64
1cygintl-8.dll
windows11-ltsc_2024-x64
1cygjpeg-8.dll
windows10-2004-x64
1cygjpeg-8.dll
windows11-ltsc_2024-x64
1cygk5crypto-3.dll
windows10-2004-x64
1cygk5crypto-3.dll
windows11-ltsc_2024-x64
1Analysis
- max time kernel
148s - max time network
141s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
10/09/2026, 10:11
Static task
static1
Behavioral task
behavioral1
Sample
cygX11-6.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
cygX11-6.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
cygXau-6.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
cygXau-6.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
cygXdmcp-6.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
cygXdmcp-6.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
cygcom_err-2.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
cygcom_err-2.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
cygcrypto-1.0.0.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
cygcrypto-1.0.0.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral11
Sample
cygcrypto-1.1.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
cygcrypto-1.1.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
cygfreerdp2-2.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
cygfreerdp2-2.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
cyggcc_s-seh-1.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
cyggcc_s-seh-1.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
cyggcrypt-20.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
cyggcrypt-20.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
cyggpg-error-0.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
cyggpg-error-0.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral21
Sample
cyggssapi_krb5-2.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
cyggssapi_krb5-2.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral23
Sample
cygiconv-2.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
cygiconv-2.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral25
Sample
cygidn-11.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
cygidn-11.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral27
Sample
cygintl-8.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
cygintl-8.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral29
Sample
cygjpeg-8.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
cygjpeg-8.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral31
Sample
cygk5crypto-3.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
cygk5crypto-3.dll
Resource
win11ltsc2024-20260710-en
General
- Target cygX11-6.dll
- Size 1.1MB
- Sample260910-l74e6svtez
- SHA256 dd76b95262bb433c86a1bbc4ff8bb5d0974e66de4175430f772e451c34892e58
- MD5 17454799fb654ca1755d80a9a14e2c60
- SHA1 1bbb566f6aa8d10a6d883fc32dea37a658c2e65c
- SHA512 50c763c94e95d132b73824e13269b9f7b209945bf6ff5a98a4c9563457cf4dccdcb4dfa234265fa13e8d392c25bdd03d95a4416f44207a6cd21f84946693ae9b
- SSDEEP 12288:YRW0p/7AtTJbYhdjgLHyjltJ+BXIebO/KejlhV+FL/oGvgj9CKg2PpSnVS8fOlfw:WpTAyjlsJShlhVkYJCEGfY84y
- TLSH T1B8458D15E21324ADD57BC1B082379B33B673B8352178AD3B3A64DB742F93EA0264E715
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 3 IoCs
description pid Process Token: SeRestorePrivilege 3764 rundll32.exe Token: SeBackupPrivilege 3764 rundll32.exe Token: SeDebugPrivilege 3764 rundll32.exe