Analysis
-
max time kernel
12s -
max time network
113s -
platform
windows10_x64 -
resource
win10v20201028 -
submitted
15-11-2020 23:18
General
-
Target
e417d8445b8486aac234ceb4aa7a82687d1ef83c9699215e03065bbce5b5d345.dll
-
Size
254KB
-
MD5
96a16e1b832c92b26aea891607f08f65
-
SHA1
0a63f5ec69ff5902342d9d2157fc24601d2c69de
-
SHA256
e417d8445b8486aac234ceb4aa7a82687d1ef83c9699215e03065bbce5b5d345
-
SHA512
f1d5c71819d6ac554a32f455691d8e9b9a9693c9a7c0025392eaebe600eeca4827de35dd12a6bc0abfe9496cb235419762f5e840e20207ea668a71d38dc19764
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 14 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\e417d8445b8486aac234ceb4aa7a82687d1ef83c9699215e03065bbce5b5d345.dll,#11⤵
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 4764 -s 2962⤵
- Program crash
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB