Analysis
-
max time kernel
143s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
31-12-2022 18:17
General
-
Target
3eb979a6ff1812d396023895f4bd563591ade7c57fed2a425cc63bd35d73593d.dll
-
Size
1.5MB
-
MD5
c362d65fc69f52b912c48747dc8c8441
-
SHA1
701da3f5192a695e1106b11403f76c8522a1dc51
-
SHA256
3eb979a6ff1812d396023895f4bd563591ade7c57fed2a425cc63bd35d73593d
-
SHA512
ce56d431e9f4d994b7cd40867354b57bceda0fc5c143927da5c0dd7eecf1ed2c8c98f6d7a30b0f0f4a73f10a6a2f94bf9b67f0417316a8d6f6c4ab44a10d2403
-
SSDEEP
24576:BdY+HxculZxvcUtF9F0awYOT+K9bMCqFJOJ:PrlbF9m+K9QCqW
Score
8/10
Malware Config
Signatures
-
UPX packed file 24 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious behavior: LoadsDriver 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3eb979a6ff1812d396023895f4bd563591ade7c57fed2a425cc63bd35d73593d.dll,#11⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3eb979a6ff1812d396023895f4bd563591ade7c57fed2a425cc63bd35d73593d.dll,#12⤵
- Suspicious use of SetWindowsHookEx
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB