Overview

overview

10

Static

static

10

01872bda43...35.dll

windows7_x64

1

01872bda43...35.dll

windows10-2004_x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    01872bda431e527154fcb97c2272920e21b8ae9d5262dab969ee22d924d64935
  • Size 139KB
  • Sample220201-l3ydcscegm
  • SHA256 01872bda431e527154fcb97c2272920e21b8ae9d5262dab969ee22d924d64935
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
backdooranchordns

Malware Config

Signatures

  • Anchordns family
    anchordns
  • Detected AnchorDNS Backdoor 1 IoCs

    Sample triggered yara rules associated with the AnchorDNS malware family.

    backdoor

File Explorer

  • 01872bda431e527154fcb97c2272920e21b8ae9d5262dab969ee22d924d64935
    .dll 139KB

01872bda431e527154fcb97c2272920e21b8ae9d5262dab969ee22d924d64935

  • IMPHASH 9abc3e4bbba59b4fcdcf0c50ebfc8828
  • SHA256 01872bda431e527154fcb97c2272920e21b8ae9d5262dab969ee22d924d64935
  • MD5 SHA1 SHA512 SSDEEP
windowsx86

  • Detected AnchorDNS Backdoor

    Sample triggered yara rules associated with the AnchorDNS malware family.

    backdoor
Minor OS version
Major OS version
Entry point
36963
Magic Number
267
Subsystem
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths