7e7ca9fef0083b88e55d517ada57c8a51018000e601d6043815558445277f913 | Triage

Resubmissions

29-09-2022 17:14

220929-vr6p2acdhp 10

28-09-2022 09:49

220928-ltngssgffp 1

27-09-2022 10:35

220927-mmplyseddj 5

Analysis

max time kernel
107s
max time network
129s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
27-09-2022 10:35

Sharing

Report Analysis Logs

General

Target

LdrAddx64.dll
Size

1.3MB
MD5

44bae3daeeae4dbd1b91751a11049f45
SHA1

2b2b5d181c521358e5135fdc0411c9fe755cd769
SHA256

7e7ca9fef0083b88e55d517ada57c8a51018000e601d6043815558445277f913
SHA512

34adcc7d143bf0ebe26a325cf494e585578da02b1d4d0a7f8f01ade7e414fa128371dd7bfb733183955ea91513b3c8fe87358542b90d1f0de44509a23d962d77
SSDEEP

24576:TuSJZgQhdf781ZH0hJrHb0Fm9Zx/h/oJLv8jeZXGiFpfU7y:Pw1uhJrHYm9Zx/G1v8jiXZFoy

Score

5^/10

Malware Config

Signatures

Suspicious use of NtCreateThreadExHideFromDebugger 1 IoCs

Processes:

rundll32.exe

pid process

4988 rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\LdrAddx64.dll,#1
1⤵
- Suspicious use of NtCreateThreadExHideFromDebugger
PID:4988

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads