b7be1fcee894741f7a12d6b4d018d2dbc867ae0d3099332e79038fb291bb9250

Analysis

max time kernel
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
25/09/2026, 12:26

Target
red.dll
Size 425KB
Sample260925-pmlleawbrd
SHA256 b7be1fcee894741f7a12d6b4d018d2dbc867ae0d3099332e79038fb291bb9250
MD5 2e0659d85fa9fb292b6a109af55c87d4
SHA1 b0d91e1770e3768a692b325585a977fa74a6be35
SHA512 c1a2d8934f77f9b9e3683a4bd4d999321135e41c95cbaf2af07232f2e609b57111e4a23fba3550b9074093169357e3a4db490eb38bdf657f153d01b6ca214d91
SSDEEP 6144:9Z1lpmUgTJ58TO8h94Fezpz0EX2g4SpUmDkLzt1J/JGYwqUFqoIP4IH/eeG:9ZtmU0GO8h9tbUOc7/h
TLSH
T1E9947469B98B45E2F606703549739E8FC13E980A2727A3E7B04B56452CED7D070BD38E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4716	rundll32.exe
4716	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\red.dll,#1
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4716