9921a04879a58d675f35007dfeb650de084cbff108565aaf18e066cd301283f6

Analysis

user interaction
yes
max time kernel
6s
max time network
7s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/10/2026, 06:02

Target
attackwarecs2.dll
Size 1.8MB
Sample261002-grwceaad56
SHA256 9921a04879a58d675f35007dfeb650de084cbff108565aaf18e066cd301283f6
MD5 3d37a7182151637a6906e99ef15bc8b6
SHA1 a763ae6252884513c97b0c202ec0efec3ebb34d1
SHA512 6ff96e9a6d4b97e325c878e736c49aefefcc3929f0de11f20ad1d04f6555d2c72b8bc824ca2d04626482816495fea0203670e44b161c9453549993240357b055
SSDEEP 49152:voRGyR7F7Cl8SMrfQe7s078IojU+a/stTiVVElQhWW8w:vWBT7ClfM7rR7Rz+ssBiVVEShL
TLSH
T1319533DE1421B0BBE4DADBBEBB09FC87D0139A79B6CAC0F4D18DE4E6847512C9548436
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/memory/3368-0-0x00007FF968B30000-0x00007FF968FF6000-memory.dmp	upx

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\attackwarecs2.dll,#1
1⤵
PID:3368