5ce515088a2451f2651e551fe37adf5ef31d7807958f36ac84d315bd19066257

Analysis

max time kernel
149s
max time network
124s
platform
windows11-21h2_x64
resource
win11-20260911-en
resource tags

arch:x64arch:x86image:win11-20260911-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
03/10/2026, 09:27

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Toji.dll
Size 3.3MB
Sample261003-lexf6acd85
SHA256 5ce515088a2451f2651e551fe37adf5ef31d7807958f36ac84d315bd19066257
MD5 5e081d58758a91243808ee3753d8d748
SHA1 84d6993db07d0eb909cb7a8a51fe4d3719de6136
SHA512 80d80df27d3b2dbdfcc9ab050e43344d71ff1f0fc4ddd2b186a21604c5fceb0d2dfe7b5339baa5483a678e236227f102345df0eccf0292712fa554c07bcdaa77
SSDEEP 49152:6dk7K3b9rdX05efRCZLeRTt7b9yPRDBxcMiGlPBHX+v8/gqPNqn8GXGNcAoT:1A0lZLeRTdkZjMiPB308/g4a8GXGNcP
TLSH
T1ACF5333977411FB6D947FEB44F9631278ABB263423C75B0BEB264B852F42A3D5740A80
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Signatures

Checks BIOS information in registry 2 TTPs 2 IoCs

BIOS information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\SystemBiosVersion	rundll32.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\VideoBiosVersion	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\Toji.dll,#1
1⤵
- Checks BIOS information in registry
PID:4588

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4588-0-0x00007FFEAB2C0000-0x00007FFEABAF0000-memory.dmp

Download

memory/4588-1-0x00007FFEAB2C0000-0x00007FFEABAF0000-memory.dmp