Overview

overview

1

Static

static

microsoft....mm.dll

windows7-x64

1

microsoft....mm.dll

windows10-2004-x64

1

microsoft....im.dll

windows7-x64

1

microsoft....im.dll

windows10-2004-x64

1

microsoft....tl.dll

windows7-x64

1

microsoft....tl.dll

windows10-2004-x64

1

microsoft....tl.dll

windows7-x64

1

microsoft....tl.dll

windows10-2004-x64

1

microsoft....tl.dll

windows7-x64

1

microsoft....tl.dll

windows10-2004-x64

1

microsoft....rt.dll

windows7-x64

1

microsoft....rt.dll

windows10-2004-x64

1

microsoft....mm.dll

windows7-x64

1

microsoft....mm.dll

windows10-2004-x64

1

microsoft....im.dll

windows7-x64

1

microsoft....im.dll

windows10-2004-x64

1

microsoft....tl.dll

windows7-x64

1

microsoft....tl.dll

windows10-2004-x64

1

microsoft....im.dll

windows7-x64

1

microsoft....im.dll

windows10-2004-x64

1

microsoft....im.dll

windows7-x64

1

microsoft....im.dll

windows10-2004-x64

1

microsoft....56.dll

windows7-x64

1

microsoft....56.dll

windows10-2004-x64

1

microsoft....im.dll

windows7-x64

1

microsoft....im.dll

windows10-2004-x64

1

microsoft....mm.dll

windows7-x64

1

microsoft....mm.dll

windows10-2004-x64

1

microsoft....im.dll

windows7-x64

1

microsoft....im.dll

windows10-2004-x64

1

microsoft....mm.dll

windows7-x64

1

microsoft....mm.dll

windows10-2004-x64

1

Analysis

  • max time kernel
    130s
  • max time network
    188s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    21/12/2022, 21:25 UTC

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    microsoft.windowscommunicationsapps_16005.14326.20544.0_x64__8wekyb3d8bbwe/en-us/wintlim.dll

  • Size

    282KB

  • MD5

    c6d27581202ae81a3d3326953e62823f

  • SHA1

    ace50a6926c80261c91265e68aa512154da3bcc1

  • SHA256

    bcda722e625cc9d7d5743a594ac46341992c015add15ac47f12f3d4eb567e1a6

  • SHA512

    d4fb358b284fcaab37fe6b60c8eb57a561b095600786aaa701aca14c765bcb7083f92c9cc1da096bf616042f1d48e3467fed45e81cb9b99f8727a5ada3532790

  • SSDEEP

    3::

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\microsoft.windowscommunicationsapps_16005.14326.20544.0_x64__8wekyb3d8bbwe\en-us\wintlim.dll,#1
    1⤵
      PID:1144

    Network

    • flag-unknown
      DNS
      164.2.77.40.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      164.2.77.40.in-addr.arpa
      IN PTR
      Response
    • 93.184.221.240:80
      46 B
       40 B
       1
      1
    • 52.109.8.86:443
      40 B
       1
    • 93.184.221.240:80
      322 B
       7
    • 93.184.221.240:80
      322 B
       7
    • 104.80.225.205:443
      322 B
       7
    • 93.184.221.240:80
      322 B
       7
    • 93.184.221.240:80
      322 B
       7
    • 52.242.97.97:443
      260 B
       5
    • 8.8.8.8:53
      164.2.77.40.in-addr.arpa
      dns
      70 B
       144 B
       1
      1

      DNS Request

      164.2.77.40.in-addr.arpa

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    We care about your privacy.

    This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.