24d8eb96c5ee83d949fe90862186b38b3c2a477e6da66f133a3f55fbb45dd8a6 | Triage

Analysis

max time kernel
30s
max time network
35s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
10-10-2022 12:57

Sharing

Report Analysis Logs

General

Target

mdmerge.dll
Size

1.3MB
MD5

75eb7d1e29722366de9e6fe8f38fb8be
SHA1

e8fc305c69054bbffdcbdae51b0fc7a36cb9660c
SHA256

ea9652be1d5a389a257a899049089006213d01a89a645b69673dc8f623a548b8
SHA512

119e5012deaeca3be956c916ebaa3c22bb1ffe463f3ce3d5e78c8c75002c0ab3e5e98a992a1ffdf510105a26fcf00ffca1d3b4f8343040971308554e779327c2
SSDEEP

24576:8uSJZgQhdf781ZH0hJrHb0Fm9Zx/h/oJLv8jtZXGiFpnU7:Ow1uhJrHYm9Zx/G1v8jDXZF8

Score

5^/10

Malware Config

Signatures

Suspicious use of NtCreateThreadExHideFromDebugger 1 IoCs

pid	Process
4236	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\mdmerge.dll,#1
1⤵
- Suspicious use of NtCreateThreadExHideFromDebugger
PID:4236

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads