7be87ebd15383a76745162b1949acb4e43200f489b22d653c02a532878d1e79f | Triage

Analysis

max time kernel
141s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
14-06-2022 21:00

Sharing

Report Analysis Logs

General

Target

98a683da03eb03e9d3cfc3bf5710e487151511ca538fed8ced68a9aea096a6b5.dll
Size

2.2MB
MD5

038ee7283851af218aed10dbe36d6228
SHA1

528338d22582e5ca643eee6349b7a195034a82a9
SHA256

98a683da03eb03e9d3cfc3bf5710e487151511ca538fed8ced68a9aea096a6b5
SHA512

005e4f3c402890be61355983b134cf09b61f73d6955ca85b4e823ec0f67be5efba776c0880287d9e11ced09e38ac5c9ba1ee83dc5d56674e31322c07f016d69f

Score

8^/10

Malware Config

Signatures

Blocklisted process makes network request 4 IoCs

Processes:

rundll32.exe

flow pid process

1 2996 rundll32.exe
28 2996 rundll32.exe
35 2996 rundll32.exe
36 2996 rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\98a683da03eb03e9d3cfc3bf5710e487151511ca538fed8ced68a9aea096a6b5.dll,#1
1⤵
- Blocklisted process makes network request
PID:2996

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2996-130-0x00007FFB62FA0000-0x00007FFB62FB0000-memory.dmp

Filesize
64KB

Download