79d356cd49a20a22626e21939563b21814f196fb4bff33001ac235bef181a2ed | Triage

Analysis

max time kernel
139s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
14/01/2023, 07:12 UTC

Sharing

Report Analysis Logs

General

Target

670df2c99944b08dfbe501219514a521b3f4b96d.dll
Size

6.2MB
MD5

2eb2ba9f0760c10703de1f1ad18cda02
SHA1

670df2c99944b08dfbe501219514a521b3f4b96d
SHA256

79d356cd49a20a22626e21939563b21814f196fb4bff33001ac235bef181a2ed
SHA512

245596b2d2232040c38beda562193d5d404f023e6e7297226475633e289f5935e00c9b85a3546d85644418d439120f8b3abfa57e3ac7cc522a05f4e063cfbe7f
SSDEEP

98304:Cvz7G4dWVEAR/0O76nIEB7Dx9ciwcdouYaszYbZe5lJKnU7p3OwHa9YP+djtNrb1:C7a0W5RM2SI6Vuiw9uYsbM9fmPRDnyQ

Score

1^/10

Malware Config

Signatures

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\670df2c99944b08dfbe501219514a521b3f4b96d.dll,#1
1⤵
PID:3820

Network

DNS

164.2.77.40.in-addr.arpa

Remote address:

8.8.8.8:53

Request

164.2.77.40.in-addr.arpa

IN PTR

Response
DNS

14.110.152.52.in-addr.arpa

Remote address:

8.8.8.8:53

Request

14.110.152.52.in-addr.arpa

IN PTR

Response

93.184.220.29:80

322 B
7
93.184.221.240:80

322 B
7
20.189.173.13:443

322 B
7
87.248.202.1:80

322 B
7
87.248.202.1:80

322 B
7
87.248.202.1:80

322 B
7
40.126.31.69:443

260 B
5

8.8.8.8:53

164.2.77.40.in-addr.arpa

dns

70 B
144 B
1
1

DNS Request

164.2.77.40.in-addr.arpa
8.8.8.8:53

14.110.152.52.in-addr.arpa

dns

72 B
146 B
1
1

DNS Request

14.110.152.52.in-addr.arpa

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads