Analysis
-
max time kernel
154s -
max time network
159s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
26-11-2022 22:45
General
-
Target
8faf07b4890c8567f0018a27557a953f2e0a1aa4dbef355de60da4c2270bbbdd.dll
-
Size
196KB
-
MD5
f5c37ff0e853f59bf03d6b747feba1cc
-
SHA1
25fe6d3c94caaf47ce157cea735f4a404f86b2ab
-
SHA256
8faf07b4890c8567f0018a27557a953f2e0a1aa4dbef355de60da4c2270bbbdd
-
SHA512
f53b5ef58b3da5b27b4ab3a363b1904607fc5d222b46b9217aeb9242d680faee0afef8a27fa64ee2fa67499a5f0a223b3c8d2a45a2f9946a7aa287b1fc3b43bb
-
SSDEEP
3072:Up1uTeLfvOF5jgROLAr+m8KO5YRKGwFeMtle:UKTOfmF5joOY+mw57ll
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 14 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\8faf07b4890c8567f0018a27557a953f2e0a1aa4dbef355de60da4c2270bbbdd.dll,#11⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken