Analysis

  • max time kernel
    116s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20220414-en
  • submitted
    30-04-2022 11:04

General

  • Target

    ss64.dll

  • Size

    18KB

  • MD5

    cfbf1cb96b31132ddbd8074180487b70

  • SHA1

    d8cc1b0fcd85365708396cbd8c91a479c5739a2a

  • SHA256

    80748d742c31afee1d1db90ee3c1f3212d48a683482ff0e7f37b721b03001a1b

  • SHA512

    b0349ed3333b2db5e7273e86d382c521ce3f2354c67b610a7844c28f067ba7e9fbb88853ad6567f4485d1f670e0127ee15f1149cf71e00238a291f96c614bbd0

Score
8/10

Malware Config

Signatures

  • Blocklisted process makes network request 2 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\ss64.dll,#1
    1⤵
    • Blocklisted process makes network request
    PID:2024

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads