Analysis
-
max time kernel
3s -
max time network
5s -
platform
windows10_x64 -
resource
win10v20210408 -
submitted
29-08-2021 11:36
Static task
static1
Behavioral task
behavioral1
Sample
3.dll
Resource
win7v20210408
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
3.dll
Resource
win10v20210408
windows10_x64
0 signatures
0 seconds
General
-
Target
3.dll
-
Size
38KB
-
MD5
8ca2c9564335afda47c143bf9342df82
-
SHA1
414b57313341832f875133db8f4e5a43059546c8
-
SHA256
5586765852943b5d8bc647bfeaebf0fb5894b5fd5839b749cb8d41068d22aebe
-
SHA512
7f210454015fcced266fae77c2da3bea740ee91800fa49b4e5f242ae854ea386758dcb29ff96538b3d424e9a4c198c067683a243bc7aae3bc06c1413b85f4e66
Score
5/10
Malware Config
Signatures
-
Suspicious use of SetThreadContext 45 IoCs
description pid Process PID 4016 set thread context of 0 4016 rundll32.exe PID 4016 set thread context of 0 4016 rundll32.exe PID 4016 set thread context of 0 4016 rundll32.exe PID 4016 set thread context of 0 4016 rundll32.exe PID 4016 set thread context of 0 4016 rundll32.exe PID 4016 set thread context of 0 4016 rundll32.exe PID 4016 set thread context of 0 4016 rundll32.exe PID 4016 set thread context of 0 4016 rundll32.exe PID 4016 set thread context of 0 4016 rundll32.exe PID 4016 set thread context of 0 4016 rundll32.exe PID 4016 set thread context of 0 4016 rundll32.exe PID 4016 set thread context of 0 4016 rundll32.exe PID 4016 set thread context of 0 4016 rundll32.exe PID 4016 set thread context of 0 4016 rundll32.exe PID 4016 set thread context of 0 4016 rundll32.exe PID 4016 set thread context of 0 4016 rundll32.exe PID 4016 set thread context of 0 4016 rundll32.exe PID 4016 set thread context of 0 4016 rundll32.exe PID 4016 set thread context of 0 4016 rundll32.exe PID 4016 set thread context of 0 4016 rundll32.exe PID 4016 set thread context of 0 4016 rundll32.exe PID 4016 set thread context of 0 4016 rundll32.exe PID 4016 set thread context of 0 4016 rundll32.exe PID 4016 set thread context of 0 4016 rundll32.exe PID 4016 set thread context of 0 4016 rundll32.exe PID 4016 set thread context of 0 4016 rundll32.exe PID 4016 set thread context of 0 4016 rundll32.exe PID 4016 set thread context of 0 4016 rundll32.exe PID 4016 set thread context of 0 4016 rundll32.exe PID 4016 set thread context of 0 4016 rundll32.exe PID 4016 set thread context of 0 4016 rundll32.exe PID 4016 set thread context of 0 4016 rundll32.exe PID 4016 set thread context of 0 4016 rundll32.exe PID 4016 set thread context of 0 4016 rundll32.exe PID 4016 set thread context of 0 4016 rundll32.exe PID 4016 set thread context of 0 4016 rundll32.exe PID 4016 set thread context of 0 4016 rundll32.exe PID 4016 set thread context of 0 4016 rundll32.exe PID 4016 set thread context of 0 4016 rundll32.exe PID 4016 set thread context of 0 4016 rundll32.exe PID 4016 set thread context of 0 4016 rundll32.exe PID 4016 set thread context of 0 4016 rundll32.exe PID 4016 set thread context of 0 4016 rundll32.exe PID 4016 set thread context of 0 4016 rundll32.exe PID 4016 set thread context of 0 4016 rundll32.exe -
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 4016 rundll32.exe 4016 rundll32.exe