Analysis
-
max time kernel
121s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
-
submitted
21/09/2023, 00:46
General
-
Target
fd788f4f3009a28aab3597b623ff894c2437d1fe197479ec91f283b87bd6b99c.dll
-
Size
4.8MB
-
MD5
5cbe7c902006c7ef0db82b69dfeaec1c
-
SHA1
2d9378e18d30c11a08a716db49f8a8ce48e47585
-
SHA256
fd788f4f3009a28aab3597b623ff894c2437d1fe197479ec91f283b87bd6b99c
-
SHA512
b9d712ec965acb748588bab92e621f94dac3f79b1e66f4393829fb13128c508274a47384732bd62cee92f8bba49c42601f30a0e4e89be43cdb0455eb1e4e13cd
-
SSDEEP
98304:sCEE1oY/DABXKjKMRFUnqFtbPJINr4k3Lf:sCEE1oY/De66q/xk3z
Score
5/10
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\fd788f4f3009a28aab3597b623ff894c2437d1fe197479ec91f283b87bd6b99c.dll,#11⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4.9MB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
4.9MB