9d14120012d4987867635e5b36ae7de300d16b231e83320bab7b9fd783cc49a5

Analysis

max time kernel
148s
max time network
148s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/09/2026, 19:57

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
9d14120012d4987867635e5b36ae7de300d16b231e83320bab7b9fd783cc49a5.dll
Size 1.8MB
Sample260930-yn9jastepd
SHA256 9d14120012d4987867635e5b36ae7de300d16b231e83320bab7b9fd783cc49a5
MD5 fdf6277b49fd723e0499406c54e4a14b
SHA1 26dccd58c1540788263c22e85b1a572ba19f01b9
SHA512 1c89ea96fbe1412e11dc7395e177f35a3ba8e44b1f22998e0e68f0857a72c39457110271284ddb03c7dafc837ad93abeeb0d2e5e1b9ac781df87e21538ff6065
SSDEEP 24576:anStrXhos1i7WhlNizrXAovUEcszbMDI:anS7oJ7WhvizrXAovUEcszbMDI
TLSH
T1AF95B541B3E95889EA7783398AB76231373AB941173AEB4F2204D5391D33EC07EB6715
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

Modifies registry class 13 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{000C1082-0000-0000-C000-000000000046}\ = "MsiTransform"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{000C1084-0000-0000-C000-000000000046}\ = "MsiDatabase"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{000C1086-0000-0000-C000-000000000046}\ = "MsiPatch"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{000C1092-0000-0000-C000-000000000046}\1.0\0	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{000C1092-0000-0000-C000-000000000046}\1.0	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{000C101D-0000-0000-C000-000000000046}\NumMethods\ = "3"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{000C1084-0000-0000-C000-000000000046}	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{000C1086-0000-0000-C000-000000000046}	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{000C1092-0000-0000-C000-000000000046}	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{000C101D-0000-0000-C000-000000000046}\ = "IMsiMessage"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{000C101D-0000-0000-C000-000000000046}\ProxyStubClsid32\ = "{000C103E-0000-0000-C000-000000000046}"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{000C1082-0000-0000-C000-000000000046}	regsvr32.exe

C:\Windows\system32\regsvr32.exe
regsvr32 /s C:\Users\Admin\AppData\Local\Temp\9d14120012d4987867635e5b36ae7de300d16b231e83320bab7b9fd783cc49a5.dll
1⤵
- Modifies registry class
PID:4140

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:2696

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads