Overview

overview

8

Static

static

3

2d497ee557...29.exe

windows10-2004-x64

8

2d497ee557...29.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    150s
  • max time network
    133s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    02/10/2026, 14:34

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2d497ee55786f461afe197e2e2df53020d56220d4aa1378928559cd996efe029.exe
  • Size 9.7MB
  • Sample261002-rxgfjstxcs
  • SHA256 2d497ee55786f461afe197e2e2df53020d56220d4aa1378928559cd996efe029
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
discovery

Malware Config

Signatures

  • Downloads MZ/PE file 3 IoCs
  • Loads dropped DLL 4 IoCs
  • Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

    discovery
  • Enumerates system info in registry 2 TTPs 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2d497ee55786f461afe197e2e2df53020d56220d4aa1378928559cd996efe029.exe
    "C:\Users\Admin\AppData\Local\Temp\2d497ee55786f461afe197e2e2df53020d56220d4aa1378928559cd996efe029.exe"
    1⤵
    • Downloads MZ/PE file
    • Loads dropped DLL
    • Reads the TCP/IP host and domain name from the registry
    • Enumerates system info in registry
    PID:4172

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        FTD3XX.dll
        • Path C:\DMA\DLL\FTD3XX.dll
        • Size 379KB
        • SHA256 6f28ec4f1691ed73681d420be8bc2f9a21ef690c6d6f46ecaebb2f9b9c1421ee
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        dbghelp.dll
        • Path C:\DMA\DLL\dbghelp.dll
        • Size 1.9MB
        • SHA256 6357f697069e90b475f78520f235aae782da79d32a0e70c733168082cb933c25
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        leechcore.dll
        • Path C:\DMA\DLL\leechcore.dll
        • Size 137KB
        • SHA256 628df2ad90dd360afc4633575eeef5c210852a1c7b33c34c54d8d516b2f3d1d3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        vmm.dll
        • Path C:\DMA\DLL\vmm.dll
        • Size 2.2MB
        • SHA256 db24ceab8f2d1f3bbecf614605b657c35808c1a059310888e119cf0b4ae0ac18
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        memory/4172-15-0x000001CD38E40000-0x000001CD393AD000-memory.dmp
        Download