Analysis

  • max time kernel
    2s
  • max time network
    11s
  • platform
    windows7_x64
  • resource
    win7v20201028
  • submitted
    28-12-2020 05:52

General

  • Target

    SolarWinds.Orion.Core.BusinessLayer.dll

  • Size

    1005KB

  • MD5

    094ad2c92d04b574659cc28c7543d8d6

  • SHA1

    7d2b6a2cbdbe780911723ed5fd9a3f4464c80b64

  • SHA256

    b9defa16d1aa92d85d1d5d47339c999eee42aa3b9ada5dd4d5a158efcadd509a

  • SHA512

    ea64ffd2a5c8b5f5a8e8c2cd67315b5de4c7875961c6aeddae1f510925a1939f1a6a037e0a199c9cc48a0ac44410f7d5fd116572dce3b0cc9f11a0147a168eec

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\SolarWinds.Orion.Core.BusinessLayer.dll,#1
    1⤵
      PID:648

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads