bbf6413bd1c156ae4569ec8ca3c8d803e8739405f3348a9713ab4149afcf0363 | Triage

Analysis

max time kernel
32s
max time network
32s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
29/03/2023, 07:40

Sharing

Report Analysis Logs

General

Target

tmp1p22z9vp.dll
Size

125KB
MD5

88fafedef12b808b3650f36970987b85
SHA1

acc1c19abf7a649b871a0ec4776271b66b8893fb
SHA256

bbf6413bd1c156ae4569ec8ca3c8d803e8739405f3348a9713ab4149afcf0363
SHA512

c33159f2f9a8ebadeefd85fd0fe4b412aec4c26084e10fa464e1d4b76cbf9bfc6a81789df997e31dada705c0e80e9725ba4850f5a681da5603620147e3ac25ef
SSDEEP

3072:0CqQK+IyoXptZ3hXJBGahVbJhs8PIOAwP4n+c2q0c:mQK+S5r3hnGGh54V

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 1 IoCs

pid	Process
1064	rundll32.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
1064	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\tmp1p22z9vp.dll,#1
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
PID:1064

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads