f9df5e8d65741f1a4f43927a30c44808e1335e06908dd3be41ecd73a27a0d7ad

Analysis

max time kernel
148s
max time network
141s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/09/2026, 14:44

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
f9df5e8d65741f1a4f43927a30c44808e1335e06908dd3be41ecd73a27a0d7ad.dll
Size 1.8MB
Sample260930-r4lc3stte1
SHA256 f9df5e8d65741f1a4f43927a30c44808e1335e06908dd3be41ecd73a27a0d7ad
MD5 0bb0555510493f15ee629854366216c7
SHA1 2cb346945cac8cc689b0e0788afe51ab1f843d1a
SHA512 c4e82c819805c4abb203a029444ee24d78a6d600eb6f4469c912b04ae902aed501b363e396f7d6fff8a69e6417ffaf7d67d0d3b82127096fdc7e4764fcdbb4d4
SSDEEP 24576:cnStrXhos1i7WhlNizrXAovUEcszbMDI:cnS7oJ7WhvizrXAovUEcszbMDI
TLSH
T1CF95B541B3E95889EA7783398AB76231373AB941173AEB4F2204D5391D33EC07EB6715
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

Modifies registry class 13 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{000C1092-0000-0000-C000-000000000046}\1.0\0	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{000C1092-0000-0000-C000-000000000046}\1.0	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{000C1082-0000-0000-C000-000000000046}\ = "MsiTransform"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{000C1084-0000-0000-C000-000000000046}	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{000C1086-0000-0000-C000-000000000046}	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{000C1092-0000-0000-C000-000000000046}	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{000C101D-0000-0000-C000-000000000046}\ = "IMsiMessage"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{000C101D-0000-0000-C000-000000000046}\NumMethods\ = "3"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{000C101D-0000-0000-C000-000000000046}\ProxyStubClsid32\ = "{000C103E-0000-0000-C000-000000000046}"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{000C1082-0000-0000-C000-000000000046}	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{000C1084-0000-0000-C000-000000000046}\ = "MsiDatabase"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{000C1086-0000-0000-C000-000000000046}\ = "MsiPatch"	regsvr32.exe

C:\Windows\system32\regsvr32.exe
regsvr32 /s C:\Users\Admin\AppData\Local\Temp\f9df5e8d65741f1a4f43927a30c44808e1335e06908dd3be41ecd73a27a0d7ad.dll
1⤵
- Modifies registry class
PID:3916

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads