Analysis
-
max time kernel
125s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
-
submitted
01-08-2023 19:38
General
-
Target
vcruntime140.dll
-
Size
90KB
-
MD5
5473861817fa78725313648dd9ceca7d
-
SHA1
59c929a9f329f44d21b32ccd742c8dfded815d2d
-
SHA256
a018f4d5245fd775a17dc8437ad55c2f74fb6152dd4fdf16709a60df2a063fff
-
SHA512
bf73794e44b197e74c8ec9342c4de0353d44c4ae5b3903d9908aa1b52e8641c92f38ee39625d711884b5e8d5ef95b765d361065c4d855525af56f9b9f92e76fa
-
SSDEEP
1536:oT11/9nhu8HQRC/lYLFy1E0CWtVn3GwDa/becbfQqF:o5NF/eLUCnWtVn2wDObecbftF
Score
8/10
Malware Config
Signatures
-
Blocklisted process makes network request 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\vcruntime140.dll,#11⤵
- Blocklisted process makes network request
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.0MB
-
Filesize
4.8MB
-
Filesize
10.8MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
136KB
-
Filesize
10.8MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB