Analysis

  • max time kernel
    148s
  • max time network
    127s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    02/11/2026, 03:51

General

  • Target
    libfontconfig-1.dll
  • Size 375KB
  • Sample261102-eelw4agz8l
  • SHA256 e97e4a41142dd99b25b22f2ce116bc0215d7e4222e72c6f20f02726ddfa350e3
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\libfontconfig-1.dll,#1
    1⤵
      PID:2028

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          memory/2028-1-0x00007FFF2E700000-0x00007FFF2E72B000-memory.dmp

          memory/2028-4-0x00007FFF2D630000-0x00007FFF2D646000-memory.dmp

          memory/2028-13-0x00007FFF20A80000-0x00007FFF20AAF000-memory.dmp

          memory/2028-16-0x00007FFF16F80000-0x00007FFF17036000-memory.dmp

          memory/2028-15-0x00007FFF16340000-0x00007FFF165CF000-memory.dmp

          memory/2028-14-0x00007FFF19050000-0x00007FFF191D2000-memory.dmp

          memory/2028-12-0x00007FFF20AB0000-0x00007FFF20C2D000-memory.dmp

          memory/2028-5-0x00007FFF2D510000-0x00007FFF2D62E000-memory.dmp

          memory/2028-11-0x00007FFF299A0000-0x00007FFF299CB000-memory.dmp

          memory/2028-10-0x00007FFF20C30000-0x00007FFF20C76000-memory.dmp

          memory/2028-6-0x00007FFF28A50000-0x00007FFF28B18000-memory.dmp

          memory/2028-3-0x00007FFF2D650000-0x00007FFF2D691000-memory.dmp

          memory/2028-2-0x00007FFF2E4C0000-0x00007FFF2E512000-memory.dmp

          memory/2028-9-0x00007FFF299D0000-0x00007FFF299F5000-memory.dmp

          memory/2028-7-0x00007FFF2A910000-0x00007FFF2A926000-memory.dmp

          memory/2028-8-0x00007FFF29A00000-0x00007FFF29A1A000-memory.dmp

          memory/2028-0-0x00007FFF30640000-0x00007FFF306A3000-memory.dmp