Analysis
-
max time kernel
91s -
max time network
137s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
03-10-2022 20:27
General
-
Target
581e199721a3ac47a9bebca0cd25613dba8858e73fa1fd04006fcb63d4c48acc.dll
-
Size
3.6MB
-
MD5
2938f10cb7267c934482b4a66d5a48a5
-
SHA1
56ae74b6607e1dc08ce66d0fd89aee869a497d88
-
SHA256
581e199721a3ac47a9bebca0cd25613dba8858e73fa1fd04006fcb63d4c48acc
-
SHA512
fcaac8f7e2fc984018591875d7387decfe13ed3dd1039dfeaa55227fbcd8c4231311c0555c23b70abcbfdb9f3a5fcde5ba323d43a8b14620031959bf27a84f47
-
SSDEEP
49152:foI8FGfW6bf6Z79OTzCO5Y6ke3hHL2LzUQS71Oe88d3O77pCcFUI7QVOT4:wI+Gf7bf+BOOY3hGQH178H+UQI
Score
8/10
Malware Config
Signatures
-
UPX packed file 24 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious use of SetWindowsHookEx 2 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\581e199721a3ac47a9bebca0cd25613dba8858e73fa1fd04006fcb63d4c48acc.dll,#11⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\581e199721a3ac47a9bebca0cd25613dba8858e73fa1fd04006fcb63d4c48acc.dll,#12⤵
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
251KB
-
Filesize
252KB