Analysis

  • max time kernel
    594s
  • max time network
    603s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26-10-2022 21:56

General

  • Target

    86d2aa04988befc74eccca5d99550f67093969b31aafa11cdce3476a4c59ba74_unpacked.dll

  • Size

    113KB

  • MD5

    7c64ea7c4a229414b6048d18ab0836fd

  • SHA1

    f10621be9bfee0152931f7790c2cbff022611f62

  • SHA256

    d15dbfb7ef0511556a3527cc98d09145a56302bdd19a6083ee6d007af3352434

  • SHA512

    84c267b63136c4304a7ddb0064afc22589273d7481dfe7b02e54893f843e72b1e743479b3019eac3bd1b2f0bd20a21dc556cfbdbdad88ab0a2627a7edf1bfa25

  • SSDEEP

    1536:n1ahc4Sg6qtbxmmeBAxMlkZP2EBG53NQGzcrUbqxBtk13S8s:n1aO4V6IMJ36eEBiqtgbqidS

Score
8/10

Malware Config

Signatures

  • Blocklisted process makes network request 8 IoCs
  • Drops file in System32 directory 2 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\86d2aa04988befc74eccca5d99550f67093969b31aafa11cdce3476a4c59ba74_unpacked.dll,#1
    1⤵
    • Blocklisted process makes network request
    PID:1500
  • C:\Windows\System32\rundll32.exe
    C:\Windows\System32\rundll32.exe C:\Users\Admin\AppData\Local\Temp\86d2aa04988befc74eccca5d99550f67093969b31aafa11cdce3476a4c59ba74_unpacked.dll,#1 3696021953
    1⤵
      PID:4512
    • C:\Windows\System32\svchost.exe
      C:\Windows\System32\svchost.exe -k netsvcs -p
      1⤵
      • Drops file in System32 directory
      PID:3496

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads