Analysis

  • max time kernel
    146s
  • max time network
    358s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23-11-2022 15:46

General

  • Target

    DNF绝情阁模型工具/gj/exrpg.com/Bin32/Res.dll

  • Size

    668KB

  • MD5

    ac400867d393c9b79f9f45336da6232b

  • SHA1

    6f81cef9a8e576fe0ba797a643d35e5af7db303f

  • SHA256

    c0d67a4a2827d6f0eef1843fc357655e74aa5b1d2fc6b567b19132e2320fcd42

  • SHA512

    d0c052e5145c094318c3541aa205b3f1b482595139db06be0829a0f7a68ae4565fe033a2e91e4e1bf4ee2fce999301f94d9e833189067e7ac0dfc270cce30337

  • SSDEEP

    6144:OwveyT+Q5KM5IV6ZYnMkpAfgrpTy4BpXI5HpdzHHSpjK3nCRbQhqRMNK77cHeCoo:yyT+QViX7p9HQ6+2b

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\DNF绝情阁模型工具\gj\exrpg.com\Bin32\Res.dll,#1
    1⤵
      PID:5108

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads