Analysis
-
max time kernel
102s -
max time network
165s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
15-02-2023 17:24
General
-
Target
AnkaBotPC_4.0.5/AnkaBotPC/Application/swiftshader/libGLESv2.dll
-
Size
2.7MB
-
MD5
3f0789eb2eb23dad2ff6436ccf9da71d
-
SHA1
aa268566e1b22d28c0eefdafd23b8a6ed60a987e
-
SHA256
36354f44fb58d3360d008172846610e7af680d9688946b5df206514fddd94e42
-
SHA512
0dd8704f121e78cc974a80707d911b07a8d1f82d0543b60306e1394bf47a51a7010fb828ee61cf169dffc915a6e23671938bb618a2daf93a41c4609d00fd4cf1
-
SSDEEP
49152:ZLhTCDM0nHASAZNT0fIHmM6Scy2kZsOD9h0tdTXustbXc+Z6DSrQ9dF+N3WVDLvS:XTCDMV+gX3/Z1JSb
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\AnkaBotPC_4.0.5\AnkaBotPC\Application\swiftshader\libGLESv2.dll,#11⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\AnkaBotPC_4.0.5\AnkaBotPC\Application\swiftshader\libGLESv2.dll,#12⤵