f7c5345b9928d6624716914d1c41b9660a1b091cda0557f1d1aaa465a75125f3

Analysis

max time kernel
148s
max time network
131s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
19/09/2026, 10:38

Target
pastasense.dll
Size 15.9MB
Sample260919-mppdzaeb94
SHA256 f7c5345b9928d6624716914d1c41b9660a1b091cda0557f1d1aaa465a75125f3
MD5 9db391727019cc4968b1d44e79b042ec
SHA1 8642074537f030ed188b28bbff8da5fba4e0c55e
SHA512 864e52ebcba1322144442ca4d15ed3c397bada05d9e2dd2320e103f50bc553fe897c14ddaf27791b13f494a87fa7c869eb79f89cfc20900118dbb480ad4754c2
SSDEEP 393216:0NCZWZ1+0PncP9p+ae7f7HY99OcathWFQQW:0FZ1dPnHa4fO9OcaHWF6
TLSH
T178F623C362EE6FB9D2C787716443238B2884B4775AB8D49C3AC95C02B511DAC85CFB76
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1088	rundll32.exe
1088	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\pastasense.dll,#1
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:1088

memory/1088-0-0x00007FFC69FD0000-0x00007FFC69FD2000-memory.dmp

Download

memory/1088-2-0x00007FFC45AE0000-0x00007FFC479D6000-memory.dmp

Download