Analysis
-
max time kernel
559s -
max time network
573s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
26-10-2022 21:56
Behavioral task
behavioral1
Sample
86d2aa04988befc74eccca5d99550f67093969b31aafa11cdce3476a4c59ba74_unpacked.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
86d2aa04988befc74eccca5d99550f67093969b31aafa11cdce3476a4c59ba74_unpacked.dll
Resource
win10v2004-20220812-en
General
-
Target
86d2aa04988befc74eccca5d99550f67093969b31aafa11cdce3476a4c59ba74_unpacked.dll
-
Size
113KB
-
MD5
7c64ea7c4a229414b6048d18ab0836fd
-
SHA1
f10621be9bfee0152931f7790c2cbff022611f62
-
SHA256
d15dbfb7ef0511556a3527cc98d09145a56302bdd19a6083ee6d007af3352434
-
SHA512
84c267b63136c4304a7ddb0064afc22589273d7481dfe7b02e54893f843e72b1e743479b3019eac3bd1b2f0bd20a21dc556cfbdbdad88ab0a2627a7edf1bfa25
-
SSDEEP
1536:n1ahc4Sg6qtbxmmeBAxMlkZP2EBG53NQGzcrUbqxBtk13S8s:n1aO4V6IMJ36eEBiqtgbqidS
Malware Config
Signatures
-
Blocklisted process makes network request 12 IoCs
Processes:
rundll32.exeflow pid process 2 1980 rundll32.exe 7 1980 rundll32.exe 9 1980 rundll32.exe 10 1980 rundll32.exe 11 1980 rundll32.exe 12 1980 rundll32.exe 13 1980 rundll32.exe 16 1980 rundll32.exe 17 1980 rundll32.exe 18 1980 rundll32.exe 19 1980 rundll32.exe 20 1980 rundll32.exe
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\86d2aa04988befc74eccca5d99550f67093969b31aafa11cdce3476a4c59ba74_unpacked.dll,#11⤵
- Blocklisted process makes network request
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Users\Admin\AppData\Local\Temp\86d2aa04988befc74eccca5d99550f67093969b31aafa11cdce3476a4c59ba74_unpacked.dll,#1 22884618771⤵