d5ee05aa9a00d9a0058ef255a19f2521855df841bfa78750b16d38e0b59cd1fd | Triage

Analysis

max time kernel
27s
max time network
200s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
07-06-2023 05:14

Sharing

Report Analysis Logs

General

Target

host.dll
Size

18KB
MD5

230870e5463effd55f4c72c00f1e1eda
SHA1

3999e41ba11cebf133cf4d7aedd63fb640e64246
SHA256

d5ee05aa9a00d9a0058ef255a19f2521855df841bfa78750b16d38e0b59cd1fd
SHA512

5f0b40374635c83e81a0818d051c473b057b0f0f64b87b3b913ae64045b7c2dd65e03d3c0596b73edbac774bcf9b19ad54c27ff93a7db373aef0dec9a214e7bc
SSDEEP

384:r3qHtu750gtxCYLcHtcWajpOnM/uQ9p/mvm12MGSsyV:r3Qgk/arfevmkw

Score

8^/10

Malware Config

Signatures

Blocklisted process makes network request 1 IoCs

Processes:

rundll32.exe

flow pid process

1 1212 rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\host.dll,#1
1⤵
- Blocklisted process makes network request
PID:1212

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...