2f11ca3dcc1d9400e141d8f3ee9a7a0d18e21908e825990f5c22119214fbb2f5 | Triage

Resubmissions

27-10-2022 16:10

221027-tmrjwacggm 10

21-02-2022 16:53

220221-vecanabffq 8

Analysis

max time kernel
62s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
27-10-2022 16:10

Sharing

Report Analysis Logs

General

Target

msvcr170.dll
Size

250KB
MD5

6ac740ebf98df7217d31cb826a207af6
SHA1

6bf6fc77b10f6700fa0b868f6d3515b495d1e1e0
SHA256

2f11ca3dcc1d9400e141d8f3ee9a7a0d18e21908e825990f5c22119214fbb2f5
SHA512

e0d57245047e3689f4804ed75dfcf9b1468473952a5a6bdab5ff164af1b3e5fc220ba0d737a53cb3f8318e10ef42c3ff5a5763487e2b10c785aab14eacbcde5c
SSDEEP

6144:Lo77pPOYfVtaoP/IbI9ezw79SycUB0Xy:LolfHHPQ6Sywi

Score

8^/10

Malware Config

Signatures

Blocklisted process makes network request 3 IoCs

Processes:

rundll32.exe

flow pid process

2 1044 rundll32.exe
8 1044 rundll32.exe
34 1044 rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\msvcr170.dll,#1
1⤵
- Blocklisted process makes network request
PID:1044

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1044-132-0x00007FFEF8590000-0x00007FFEF8785000-memory.dmp

Filesize
2.0MB

Download
memory/1044-133-0x00007FFEF8590000-0x00007FFEF8785000-memory.dmp

Filesize
2.0MB

Download