d5ee05aa9a00d9a0058ef255a19f2521855df841bfa78750b16d38e0b59cd1fd

Analysis

max time kernel
284s
max time network
321s
platform
windows10-2004_x64
resource
win10v2004-20230221-en
resource tags

arch:x64arch:x86image:win10v2004-20230221-enlocale:en-usos:windows10-2004-x64system
submitted
07/06/2023, 05:14

Target
host.dll
Size 18KB
Sample230607-fxdh4sgh74
SHA256 d5ee05aa9a00d9a0058ef255a19f2521855df841bfa78750b16d38e0b59cd1fd
MD5 230870e5463effd55f4c72c00f1e1eda
SHA1 3999e41ba11cebf133cf4d7aedd63fb640e64246
SHA512 5f0b40374635c83e81a0818d051c473b057b0f0f64b87b3b913ae64045b7c2dd65e03d3c0596b73edbac774bcf9b19ad54c27ff93a7db373aef0dec9a214e7bc
SSDEEP 384:r3qHtu750gtxCYLcHtcWajpOnM/uQ9p/mvm12MGSsyV:r3Qgk/arfevmkw
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

Blocklisted process makes network request 1 IoCs

flow	pid	Process
22	2880	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\host.dll,#1
1⤵
- Blocklisted process makes network request
PID:2880