Analysis
- max time kernel
148s - max time network
143s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
07/11/2026, 16:33
Behavioral task
behavioral1
Sample
cmutil.dll
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
cmutil.dll
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
General
- Target cmutil.dll
- Size 563KB
- Sample261107-t2lbeaes8k
- SHA256 d9c4d2c9345c60752c4c517ef2e51c47cb4f672f963a0342f86e045210fa4575
- MD5 a26cc4ff9bdd16b5cb192839f2386315
- SHA1 548a034b871b2068507ff370fb232848c9606a87
- SHA512 a9564f391d172bf377b7a0310e1fd3d10df7e70ccd6318a2c9416ddae72867bad9a37b64cb4c81526c5775477188861cc976ebe31e228c5ee9409c99cc7d9bab
- SSDEEP 12288:h9rgksJqlTo0HKyHZRZGnsU3iTQMIPcpslpo+O0:nrgkI0YsU3iTsPUsuU
- TLSH T110C4232DD31932B1E78CD5723AA467AE079E754B6F640357078183F474B2A8A7CAC1F4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/3488-0-0x00007FFB36300000-0x00007FFB36403000-memory.dmp upx - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 3488 rundll32.exe