Analysis
-
max time kernel
166s -
max time network
185s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
05/12/2022, 11:36
General
-
Target
990ac3de67ed262e6ccb8b83a4c4b0f6517e7797f19fb35b044457b30a2f9416.dll
-
Size
249KB
-
MD5
57405576a2b97a9a81535f3338dccf1d
-
SHA1
bba0aaeb68183dd6a9f10eff2416f6ccdaf99937
-
SHA256
990ac3de67ed262e6ccb8b83a4c4b0f6517e7797f19fb35b044457b30a2f9416
-
SHA512
480b278d7f09c5c446b84c5604b209c0f371d1eef4e0335a963b46ad3d1f69ffe612e88e216e671bc783df4ae823ec88211e45e1fe51625d175eccc68a35ade4
-
SSDEEP
6144:QDS+KwKJq2bO1hazUrAgJ86V0cC/WryTTHtBZp8:QDfYJYhTVfaP+yjZS
Score
8/10
Malware Config
Signatures
-
UPX packed file 3 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious use of SetWindowsHookEx 1 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\990ac3de67ed262e6ccb8b83a4c4b0f6517e7797f19fb35b044457b30a2f9416.dll,#11⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\990ac3de67ed262e6ccb8b83a4c4b0f6517e7797f19fb35b044457b30a2f9416.dll,#12⤵
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
656KB
-
Filesize
240KB
-
Filesize
656KB
-
Filesize
656KB
-
Filesize
656KB