Analysis
- max time kernel
149s - max time network
140s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
14/11/2026, 12:19
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
kmplayer.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
kmplayer.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral3
Sample
version.dll
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral4
Sample
version.dll
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
General
- Target version.dll
- Size 3.1MB
- Sample261114-phe8tsdy4l
- SHA256 1a6553e16b67f2687ea228123b5c490ff1c655433ba822ebebf073c15c6a1cca
- MD5 a96ae548767027c41fb43d9e4678acf5
- SHA1 4abe3899032b5f00347b44c3d44737b3ef5dcc9e
- SHA512 6a3c3c64d56562d652bc9efba41342d6abb19d11f764cb67d628a228eb28cb7f2c9b7b06729f73c7b153d0bb8eca287f7b1c0ca3b52b89ce877d2f4388a1b059
- SSDEEP 6144:Kb/YxSfM+e8CJswPEBYGe1L+cib6vh/2Xu2RxV8+xJmlF:U/Yx
- TLSH T1ABE56619AA987F7BF0D2D3BDA22C42FCD27500AE96763340349BC50BB514821F9BD6E5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Loads dropped DLL 1 IoCs
pid Process 2884 rundll32.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\SpiritFernOrigi_2884.dll
- Size 30KB
- SHA256 e549d528fee40208df2dd911c2d96b29d02df7bef9b30c93285f4a2f3e1ad5b0
- MD5 17c1e1099b65051bb6dec71fea37315b
- SHA1 8ed26469afbd53da7749ef9c6ab8c7f010e9bb1e
- SHA512 e5274c47786f14c4275307c80d0eca48797267d32b069aed30993e571ead0289652e1254bd2ecabef3b2bc2039504e156ed2eae9c2c280b31034fa457a32ea79
- SSDEEP 768:FrAO9YmckVPxIiTAqMwwyg2ulzxAfv5r6wD1Pe3pU:FrnYmckVPxIiTAqMwm2ulzxAfv1Pe6
- TLSH T18AE27C4DA72C319AF4A366B88255B207653073751324A5FF0AE1C67D0D237C4AE38FEA
- MD5 SHA1 SHA512 SSDEEP TLSH