f4e0528ea9aa23b92e884db2dedfc8942e111034d548d0ad25111da592312d02 | Triage

Analysis

max time kernel
146s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
24-08-2022 12:49

Sharing

Report Analysis Logs

General

Target

2a.dll
Size

1.0MB
MD5

3421a06f8c85e0bfd0b2d7f5549809ba
SHA1

139f7e359a72852f9d4f98d4e67104f14b597680
SHA256

f4e0528ea9aa23b92e884db2dedfc8942e111034d548d0ad25111da592312d02
SHA512

bafad1b1bf78c8d191575d76b4bae83307ef6eb7b84f353cb42f75008aaf9064ae94e45d5c421f6fa31172acaaf7d481135123873ce434d6b56d84284e531b7e
SSDEEP

24576:y5gRQXtgtB3gieIBOf0OU9Zx/vqqsgy2Ye5hnwN+8Q:UetB7PBOf0F9Zx/9/y2YG9w

Score

5^/10

Malware Config

Signatures

Suspicious use of NtCreateThreadExHideFromDebugger 1 IoCs

pid	Process
2244	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2a.dll,#1
1⤵
- Suspicious use of NtCreateThreadExHideFromDebugger
PID:2244

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads