8bdd318996fb3a947d10042f85b6c6ed29547e1d6ebdc177d5d85fa26859e1ca | Triage

Resubmissions

27-10-2022 16:10

221027-tmvxascfh8 10

11-04-2022 12:48

220411-p1slwaabh8 8

Analysis

max time kernel
160s
max time network
166s
platform
windows10-2004_x64
resource
win10v2004-20220331-en
submitted
11-04-2022 12:48

Sharing

Report Analysis Logs

General

Target

8bdd318996fb3a947d10042f85b6c6ed29547e1d6ebdc177d5d85fa26859e1ca.dll
Size

247KB
MD5

a0b4e7622728c317f37ae354b8bc3dbb
SHA1

bdfd9f8371e683e9013b74cc61a3583acf9206ad
SHA256

8bdd318996fb3a947d10042f85b6c6ed29547e1d6ebdc177d5d85fa26859e1ca
SHA512

b5c660d3f69f6558c596861ae86731b8c9fa3f064eea0be62be9b20b79d2ffeab98873b72a81fb21b1b2f7c6d979ad42be03d917a52e33456b56a6d7d49a292c

Score

8^/10

Malware Config

Signatures

Blocklisted process makes network request 4 IoCs

Processes:

rundll32.exe

flow pid process

2 5116 rundll32.exe
33 5116 rundll32.exe
34 5116 rundll32.exe
49 5116 rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\8bdd318996fb3a947d10042f85b6c6ed29547e1d6ebdc177d5d85fa26859e1ca.dll,#1
1⤵
- Blocklisted process makes network request
PID:5116

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/5116-124-0x00007FFE56350000-0x00007FFE56545000-memory.dmp

Filesize
2.0MB

Download
memory/5116-125-0x00007FFE56350000-0x00007FFE56545000-memory.dmp

Filesize
2.0MB

Download