Overview
overview
8Static
static
3ps2DLC/Bin...cs.dll
windows11-ltsc_2024-x64
1ps2DLC/Bin...nt.dll
windows11-ltsc_2024-x64
1ps2DLC/Bin...ty.dll
windows11-ltsc_2024-x64
8ps2DLC/Bin...st.dll
windows11-ltsc_2024-x64
1ps2DLC/Bin...ty.dll
windows11-ltsc_2024-x64
8ps2DLC/Bin...nt.dll
windows11-ltsc_2024-x64
8ps2DLC/Bin...me.dll
windows11-ltsc_2024-x64
8ps2DLC/Bin...on.dll
windows11-ltsc_2024-x64
8ps2DLC/Bin...kr.dll
windows11-ltsc_2024-x64
1ps2DLC/Bin...cs.dll
windows11-ltsc_2024-x64
1ps2DLC/Bin...nt.dll
windows11-ltsc_2024-x64
1ps2DLC/Bin...ty.dll
windows11-ltsc_2024-x64
8ps2DLC/Bin...st.dll
windows11-ltsc_2024-x64
1ps2DLC/Bin...ty.dll
windows11-ltsc_2024-x64
8ps2DLC/Bin...nt.dll
windows11-ltsc_2024-x64
8ps2DLC/Bin...me.dll
windows11-ltsc_2024-x64
1ps2DLC/Bin...on.dll
windows11-ltsc_2024-x64
1ps2DLC/Bin...kr.dll
windows11-ltsc_2024-x64
8ps2DLC/Res...es.dll
windows11-ltsc_2024-x64
8ps2DLC/Res...es.dll
windows11-ltsc_2024-x64
8ps2DLC/Res...es.dll
windows11-ltsc_2024-x64
8ps2DLC/Res...es.dll
windows11-ltsc_2024-x64
8ps2DLC/Res...es.dll
windows11-ltsc_2024-x64
8ps2DLC/Res...es.dll
windows11-ltsc_2024-x64
1ps2DLC/Res...es.dll
windows11-ltsc_2024-x64
8ps2DLC/Res...kr.dll
windows11-ltsc_2024-x64
1ps2DLC/Res...es.dll
windows11-ltsc_2024-x64
8ps2DLC/Res...es.dll
windows11-ltsc_2024-x64
1ps2DLC/Res...es.dll
windows11-ltsc_2024-x64
8ps2DLC/Res...es.dll
windows11-ltsc_2024-x64
8ps2DLC/Res...kr.dll
windows11-ltsc_2024-x64
1ps2DLC/loadGAC.ps1
windows11-ltsc_2024-x64
6Analysis
- max time kernel
900s - max time network
481s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
02/10/2026, 12:44
Static task
static1
Behavioral task
behavioral1
Sample
ps2DLC/Binaries/amd64/Microsoft.PowerShell.Commands.Diagnostics.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral2
Sample
ps2DLC/Binaries/amd64/Microsoft.PowerShell.Commands.Management.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
ps2DLC/Binaries/amd64/Microsoft.PowerShell.Commands.Utility.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral4
Sample
ps2DLC/Binaries/amd64/Microsoft.PowerShell.ConsoleHost.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
ps2DLC/Binaries/amd64/Microsoft.PowerShell.Security.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral6
Sample
ps2DLC/Binaries/amd64/Microsoft.WSMan.Management.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
ps2DLC/Binaries/amd64/Microsoft.WSMan.Runtime.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral8
Sample
ps2DLC/Binaries/amd64/System.Management.Automation.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral9
Sample
ps2DLC/Binaries/amd64/pspluginwkr.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral10
Sample
ps2DLC/Binaries/x86/Microsoft.PowerShell.Commands.Diagnostics.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral11
Sample
ps2DLC/Binaries/x86/Microsoft.PowerShell.Commands.Management.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral12
Sample
ps2DLC/Binaries/x86/Microsoft.PowerShell.Commands.Utility.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral13
Sample
ps2DLC/Binaries/x86/Microsoft.PowerShell.ConsoleHost.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral14
Sample
ps2DLC/Binaries/x86/Microsoft.PowerShell.Security.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral15
Sample
ps2DLC/Binaries/x86/Microsoft.WSMan.Management.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral16
Sample
ps2DLC/Binaries/x86/Microsoft.WSMan.Runtime.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral17
Sample
ps2DLC/Binaries/x86/System.Management.Automation.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral18
Sample
ps2DLC/Binaries/x86/pspluginwkr.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral19
Sample
ps2DLC/ResourceBinaries/amd64/en-US/Microsoft.PowerShell.Commands.Diagnostics.resources.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral20
Sample
ps2DLC/ResourceBinaries/amd64/en-US/Microsoft.PowerShell.Commands.Management.resources.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral21
Sample
ps2DLC/ResourceBinaries/amd64/en-US/Microsoft.PowerShell.Commands.Utility.resources.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral22
Sample
ps2DLC/ResourceBinaries/amd64/en-US/Microsoft.PowerShell.ConsoleHost.resources.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral23
Sample
ps2DLC/ResourceBinaries/amd64/en-US/Microsoft.PowerShell.Security.resources.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral24
Sample
ps2DLC/ResourceBinaries/amd64/en-US/Microsoft.WSMan.Management.resources.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral25
Sample
ps2DLC/ResourceBinaries/amd64/en-US/System.Management.Automation.resources.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral26
Sample
ps2DLC/ResourceBinaries/amd64/en-US/pspluginwkr.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral27
Sample
ps2DLC/ResourceBinaries/x86/en-US/Microsoft.PowerShell.Commands.Diagnostics.resources.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral28
Sample
ps2DLC/ResourceBinaries/x86/en-US/Microsoft.PowerShell.Commands.Management.resources.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral29
Sample
ps2DLC/ResourceBinaries/x86/en-US/Microsoft.PowerShell.Commands.Utility.resources.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral30
Sample
ps2DLC/ResourceBinaries/x86/en-US/Microsoft.PowerShell.ConsoleHost.resources.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral31
Sample
ps2DLC/ResourceBinaries/x86/zh-TW/pspluginwkr.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral32
Sample
ps2DLC/loadGAC.ps1
Resource
win11ltsc2024-20260911-en
General
- Target ps2DLC/ResourceBinaries/x86/en-US/Microsoft.PowerShell.Commands.Management.resources.dll
- Size 36KB
- Sample261002-pyra2asgnb
- SHA256 a03c757d031c0afa6e3ade5772bc510b551010ef8d7141caceb2bd0e6fac0263
- MD5 10c9c4380c4b403b95d757c4517afd5b
- SHA1 139599fe7622a1b11e9090094e3f1fac9ceec7ba
- SHA512 8c410fa6d38b27e40340fe6c0a803cca0d927264bd969654d0ae080e61f9f08268360ae843d08390a214f5bfc4cdf538595f5de3e9172d2e7cdf2e9c1d136c8b
- SSDEEP 384:9F8Tz+zhGF3rushkHBbZaJQ/Q1eYMTOK6tl9vp6f6APROV0IOttZl6Rmi5zBWlFB:9NSkH+/l9vp6f66ROVQttZYzO
- TLSH T1A3F2841663EC0235F6F20BB1367A61858E37BCB55A30D71E5078420D2AB5A64C6F7BB3
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\ps2DLC\ResourceBinaries\x86\en-US\Microsoft.PowerShell.Commands.Management.resources.dll,#11⤵PID:1932
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵PID:4304
-
C:\Windows\System32\SecurityHealthHost.exe\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding1⤵PID:5540