Analysis
- user interaction
yes - max time kernel
149s - max time network
141s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
- submitted
30/09/2026, 12:37
General
- Target Bin/Files/Patched.dll
- Size 21.5MB
- Sample260930-ptpxeaycmd
- SHA256 d6f60d53135dfc351c65936f99739bb3349d2d17474eeaf8d53d2d8474c73848
Score
5/10
Malware Config
Signatures
- Suspicious use of NtSetInformationThreadHideFromDebugger 1 TTPs 3 IoCs
- Suspicious behavior: EnumeratesProcesses 1 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\Bin\Files\Patched.dll,#11⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2268-0-0x000001B5A7EC0000-0x000001B5A7EC1000-memory.dmp