Analysis

  • max time kernel
    149s
  • max time network
    144s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    13/11/2026, 16:51

General

  • Target
    libcairo-2.dll
  • Size 1.2MB
  • Sample261113-vcvdfsys6n
  • SHA256 aa794d8f62e122d7739523643e293d26e05f2c1c723035079ba01dcaeda0dad6
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\libcairo-2.dll,#1
    1⤵
      PID:3960

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          memory/3960-7-0x00007FFFF8B30000-0x00007FFFF8B76000-memory.dmp

          memory/3960-13-0x00007FFFFBBF0000-0x00007FFFFBC06000-memory.dmp

          memory/3960-18-0x00007FFFEA610000-0x00007FFFEA6C3000-memory.dmp

          memory/3960-16-0x00007FFFF8210000-0x00007FFFF823F000-memory.dmp

          memory/3960-15-0x00007FFFEA860000-0x00007FFFEAA32000-memory.dmp

          memory/3960-14-0x00007FFFF8380000-0x00007FFFF83AA000-memory.dmp

          memory/3960-11-0x00007FFFEAA40000-0x00007FFFEAB5D000-memory.dmp

          memory/3960-10-0x00007FFFF80D0000-0x00007FFFF8122000-memory.dmp

          memory/3960-9-0x00007FFFF83B0000-0x00007FFFF83F1000-memory.dmp

          memory/3960-8-0x00007FFFF8400000-0x00007FFFF8434000-memory.dmp

          memory/3960-5-0x00007FFFEAB60000-0x00007FFFEADEE000-memory.dmp

          memory/3960-2-0x00007FFFFBC30000-0x00007FFFFBCB2000-memory.dmp

          memory/3960-4-0x00007FFFF8240000-0x00007FFFF830B000-memory.dmp

          memory/3960-3-0x00007FFFF8FF0000-0x00007FFFF90AB000-memory.dmp

          memory/3960-1-0x00007FFFFBCF0000-0x00007FFFFBD1A000-memory.dmp

          memory/3960-17-0x00007FFFEA6D0000-0x00007FFFEA854000-memory.dmp

          memory/3960-12-0x00007FF801400000-0x00007FF801420000-memory.dmp

          memory/3960-6-0x00007FFFFBCD0000-0x00007FFFFBCE7000-memory.dmp

          memory/3960-0-0x00007FFFF7780000-0x00007FFFF78B4000-memory.dmp