1a6553e16b67f2687ea228123b5c490ff1c655433ba822ebebf073c15c6a1cca

Analysis

max time kernel
148s
max time network
130s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
14/11/2026, 12:19

Target
version.dll
Size 3.1MB
Sample261114-phe8tsdy4l
SHA256 1a6553e16b67f2687ea228123b5c490ff1c655433ba822ebebf073c15c6a1cca
MD5 a96ae548767027c41fb43d9e4678acf5
SHA1 4abe3899032b5f00347b44c3d44737b3ef5dcc9e
SHA512 6a3c3c64d56562d652bc9efba41342d6abb19d11f764cb67d628a228eb28cb7f2c9b7b06729f73c7b153d0bb8eca287f7b1c0ca3b52b89ce877d2f4388a1b059
SSDEEP 6144:Kb/YxSfM+e8CJswPEBYGe1L+cib6vh/2Xu2RxV8+xJmlF:U/Yx
TLSH
T1ABE56619AA987F7BF0D2D3BDA22C42FCD27500AE96763340349BC50BB514821F9BD6E5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Loads dropped DLL 1 IoCs

pid	Process
1232	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\version.dll,#1
1⤵
- Loads dropped DLL
PID:1232

SpiritFernOrigi_1232.dll

Path C:\Users\Admin\AppData\Local\Temp\SpiritFernOrigi_1232.dll
Size 53KB
SHA256 cea99f212af557a9613150c5509631403ed0f05f5d9a06ac42039bd59b40e39a
MD5 0793e3f7fad65b159b5f242400bfc140
SHA1 3bc52801fc66150d0a2d064c1df3770b88d2fad2
SHA512 d1bf36744aacec8a95665f56f5ce4cf00685f836c4905b5a51dee55c803fafe6fc8069a08fe3959761b5a2e6367a2283077828958cb4888b909f7d402f6fd917
SSDEEP 1536:Y9DVZmckVPxIiTPqMwsK2ulzxA6lEJLPGzn:Y9uckVPxIiTPqMwszulzxA6lExur
TLSH
T1DC435A5D677C2098F9A316B89171AA17AA307370133022FF46F1D5380D173E4AA38FBA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download