Analysis
- max time kernel
78s - max time network
129s - platform
windows10_x64 - resource
win10v20201028 - submitted
28/01/2021, 14:41
Static task
static1
Behavioral task
behavioral1
Sample
torisma_unpacked.dll
Resource
win7v20201028
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
torisma_unpacked.dll
Resource
win10v20201028
0 signatures
0 seconds
General
- Target torisma_unpacked.dll
- Size 140KB
- Sample210128-1bcdm9w5yn
- SHA256 7cd3ca8bdfb44e98a4b9d0c6ad77546e03d169bda9bdf3d1bcf339f68137af23
- MD5 9a8403e2eb0324050e53f2c500bc8308
- SHA1 56b9de82c7ede1c231dc20ff0726bf416f13f312
- SHA512 07db5298a5fcebc3e691dffadd8269913ec6b27082d3993e41b4159795edbfea62bc803c2851b6e3ce22f478e3ba5d102997efd017f29258fddf2c097c4800b1
- MD5 SHA1 SHA512
Score
8/10
Malware Config
Signatures
- Blocklisted process makes network request 7 IoCs
flow pid Process 7 648 rundll32.exe 17 648 rundll32.exe 20 648 rundll32.exe 21 648 rundll32.exe 22 648 rundll32.exe 23 648 rundll32.exe 24 648 rundll32.exe