a78e00102ec277e7b4743b7c2094fe9c6ba3ac598c143323797cc2749675215e | Triage

Analysis

max time kernel
42s
max time network
45s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
14/09/2022, 09:42

Sharing

Report Analysis Logs

General

Target

新建文件夹 (3)/BOOTVID.dll
Size

25KB
MD5

05c4143ea8151689f258627525bfc776
SHA1

f2dc8402e6fd90b5b6a2599a665536db754c95c7
SHA256

4fc49e2fc7473d09b1af2d9ef4215c13785e1ff8d1ad939baa3e7f1f0e59a388
SHA512

554cf010cb3b66d91b74725ff7b855de459415835fd1fe84fdb7c835d12c09e3e9415727e6335df01c6115adb7714dabf1850544f462f92623cc3a9d90bcda64
SSDEEP

384:bn9XbbhfnmLe0FoDK70CRyXS6LZWjvUW8mXjDBRJ34wll2Hp:j9X3VmLboDK7sXbWLXj1Po0w

Score

1^/10

Malware Config

Signatures

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\新建文件夹 (3)\BOOTVID.dll",#1
1⤵
PID:1920

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1920-54-0x0000000140000000-0x00000001405E8000-memory.dmp

Filesize
5.9MB

Download
memory/1920-57-0x000007FF70450000-0x000007FF7045A000-memory.dmp

Filesize
40KB

Download
memory/1920-56-0x000007FF346C0000-0x000007FF34709000-memory.dmp

Filesize
292KB

Download
memory/1920-55-0x000007FF709E0000-0x000007FF709F4000-memory.dmp

Filesize
80KB

Download
memory/1920-58-0x0000000000100000-0x000000000015E000-memory.dmp

Filesize
376KB

Download
memory/1920-59-0x000007FF404C0000-0x000007FF40580000-memory.dmp

Filesize
768KB

Download
memory/1920-60-0x0000000000100000-0x0000000000106000-memory.dmp

Filesize
24KB

Download