87bf55705ad9cae6c95af0beb715e526f7f48720a3bf9454a0698e4fe740e249 | Triage

Analysis

max time kernel
311s
max time network
356s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
25-11-2022 19:28

Sharing

Report Analysis Logs

General

Target

Crack/3dmgame.dll
Size

967KB
MD5

a5769ac94dc88015ba7ff970057f8870
SHA1

a317324b40781db8888212226b690f762996cf6e
SHA256

09c4821c8d4cd1222f9087cfea44bdfd2a8f41f7756694c2d56c0c0b2573e378
SHA512

8361ffeb5cc820d2c774aff8ef420550456824d9dc5eae5c882c055de6a486c705039e392d5cf64a7406cc65a25ca667c6df7dfa3ca3d071032236078fe6d3e3
SSDEEP

24576:AP3dHyZnxQuEWgIcRZ74o9C7w4/Gi3uA:Y2xkDIcRN4oWJ/HeA

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 12 IoCs

Processes:

rundll32.exe

pid	process
1700	rundll32.exe
1700	rundll32.exe
1700	rundll32.exe
1700	rundll32.exe
1700	rundll32.exe
1700	rundll32.exe
1700	rundll32.exe
1700	rundll32.exe
1700	rundll32.exe
1700	rundll32.exe
1700	rundll32.exe
1700	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\Crack\3dmgame.dll,#1
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:1700

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1700-132-0x00007FFF69690000-0x00007FFF6991F000-memory.dmp

Filesize
2.6MB

Download
memory/1700-133-0x00007FFF69690000-0x00007FFF6991F000-memory.dmp

Filesize
2.6MB

Download