051e0c75150eb00ccc06f59327213e4bcc2d29d139c7c98e4cca807f5fd6eb0e | Triage

Analysis

max time kernel
94s
max time network
126s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
22-04-2023 21:35

Sharing

Report Analysis Logs

General

Target

r.crl
Size

486B
MD5

0eae2996963cd33ec450ffe25acc039c
SHA1

45879c39bd73fc9b35fbf7463ba1b3bd7a25487c
SHA256

051e0c75150eb00ccc06f59327213e4bcc2d29d139c7c98e4cca807f5fd6eb0e
SHA512

56e12dca2134abacea2c9ff24ff5e918c07f7c15102421f47f3924b893d82ff57b089888e60de024521b3861650fbade43bdb586fd2d22f577145e391811f126

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

rundll32.exe

pid process

3032 rundll32.exe
Suspicious use of FindShellTrayWindow 1 IoCs

Processes:

rundll32.exe

pid process

3032 rundll32.exe

C:\Windows\system32\rundll32.exe
C:\Windows\system32\rundll32.exe cryptext.dll,CryptExtOpenCRL C:\Users\Admin\AppData\Local\Temp\r.crl
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
PID:3032

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads