Analysis
-
max time kernel
151s -
max time network
157s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
03-12-2022 00:06
General
-
Target
aafe18f1e63d123d1543d43c09a3e2443e5ef79722b91fb09700e1654a21919b.dll
-
Size
88KB
-
MD5
e59d7bf0af172acad3e4c837e92d991b
-
SHA1
3adb108ff6a830ba40d9473dc8b977f0b86db516
-
SHA256
aafe18f1e63d123d1543d43c09a3e2443e5ef79722b91fb09700e1654a21919b
-
SHA512
198735e04845ba438c4f26b89aedfb2cfe5f7069f92eaeca9cc7d7d53e87ec8e7ee46da476ba2dbab86d758dc3fd795fc03f4ef4f19d00d8eae8bfcd6a0ef8f7
-
SSDEEP
1536:fcV6pUva5kAVnEBlweQAioxnqJHU4+t+8zoFmB7jK+SrL/2wTAXfg:fcVafVELweVPnqJHc+r9L/2wcXI
Malware Config
Signatures
-
Loads dropped DLL 2 IoCs
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Windows\Explorer.EXEC:\Windows\Explorer.EXE1⤵
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\aafe18f1e63d123d1543d43c09a3e2443e5ef79722b91fb09700e1654a21919b.dll,#12⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\aafe18f1e63d123d1543d43c09a3e2443e5ef79722b91fb09700e1654a21919b.dll,#13⤵
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
26KB
MD58308d39023917b6e57d203cd1662ed58
SHA1701c38b3cc5f68fdfb41d278d08b8c0dbe1baaa1
SHA256fda0d790c68ce3351ce7343ce9e6388689ee17fb984337342ee7c8fb5ba39fbd
SHA512dfd9918952edad126ce19c91364ea1ed553aa5bbfaf68d11647e1019295b880e211a4392c18653e99559186832ce42d5ff892ac91a63f5692be05515278bc53b
-
Filesize
26KB
MD58308d39023917b6e57d203cd1662ed58
SHA1701c38b3cc5f68fdfb41d278d08b8c0dbe1baaa1
SHA256fda0d790c68ce3351ce7343ce9e6388689ee17fb984337342ee7c8fb5ba39fbd
SHA512dfd9918952edad126ce19c91364ea1ed553aa5bbfaf68d11647e1019295b880e211a4392c18653e99559186832ce42d5ff892ac91a63f5692be05515278bc53b
-
Filesize
196KB
-
Filesize
196KB
-
Filesize
60KB
-
Filesize
60KB