Overview

overview

10

Static

static

10

2e45a048a6...c0.dll

windows7-x64

1

2e45a048a6...c0.dll

windows10-2004-x64

1

Analysis

  • max time kernel
    141s
  • max time network
    148s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25-09-2023 04:59

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    2e45a048a6ced602c68bf7f46f5010a1aba2bbad6efce9c34c02f061aca051c0.dll

  • Size

    259KB

  • MD5

    dfe43695e24ba2974ab1fb1ff578966a

  • SHA1

    154cdc7a5a7d65a7bc2980e4d89f8cb7aba75498

  • SHA256

    2e45a048a6ced602c68bf7f46f5010a1aba2bbad6efce9c34c02f061aca051c0

  • SHA512

    b660899a4572b3c914b0aa48bf7d635e5277989988723e647d3685bf1a899673811d2c44c0fc4823e2b8f7e1135d8fc9473f54af83c0c5c73f6e6ef2aa7cccd1

  • SSDEEP

    6144:uJqVG5d1IpMyibgkTZI6jHID90aOTBXBH/:u3d6tevox+TBXt

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\2e45a048a6ced602c68bf7f46f5010a1aba2bbad6efce9c34c02f061aca051c0.dll,#1
    1⤵
      PID:2716
    • C:\Windows\system32\rundll32.exe
      "C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe
      1⤵
        PID:4712
      • C:\Windows\System32\svchost.exe
        C:\Windows\System32\svchost.exe -k UnistackSvcGroup
        1⤵
        • Suspicious use of AdjustPrivilegeToken
        PID:3712

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/3712-0-0x000001507E8B0000-0x000001507E8C0000-memory.dmp
        Filesize

        64KB

        Download
      • memory/3712-16-0x000001507E9B0000-0x000001507E9C0000-memory.dmp
        Filesize

        64KB

        Download
      • memory/3712-32-0x000001507EFA0000-0x000001507EFA1000-memory.dmp
        Filesize

        4KB

        Download
      • memory/3712-33-0x000001507EFD0000-0x000001507EFD1000-memory.dmp
        Filesize

        4KB

        Download
      • memory/3712-34-0x000001507EFD0000-0x000001507EFD1000-memory.dmp
        Filesize

        4KB

        Download
      • memory/3712-35-0x000001507EFD0000-0x000001507EFD1000-memory.dmp
        Filesize

        4KB

        Download
      • memory/3712-36-0x000001507EFD0000-0x000001507EFD1000-memory.dmp
        Filesize

        4KB

        Download
      • memory/3712-37-0x000001507EFD0000-0x000001507EFD1000-memory.dmp
        Filesize

        4KB

        Download
      • memory/3712-38-0x000001507EFD0000-0x000001507EFD1000-memory.dmp
        Filesize

        4KB

        Download
      • memory/3712-39-0x000001507EFD0000-0x000001507EFD1000-memory.dmp
        Filesize

        4KB

        Download
      • memory/3712-40-0x000001507EFD0000-0x000001507EFD1000-memory.dmp
        Filesize

        4KB

        Download
      • memory/3712-41-0x000001507EFD0000-0x000001507EFD1000-memory.dmp
        Filesize

        4KB

        Download
      • memory/3712-42-0x000001507EFD0000-0x000001507EFD1000-memory.dmp
        Filesize

        4KB

        Download
      • memory/3712-43-0x000001507EBF0000-0x000001507EBF1000-memory.dmp
        Filesize

        4KB

        Download
      • memory/3712-44-0x000001507EBE0000-0x000001507EBE1000-memory.dmp
        Filesize

        4KB

        Download
      • memory/3712-46-0x000001507EBF0000-0x000001507EBF1000-memory.dmp
        Filesize

        4KB

        Download
      • memory/3712-49-0x000001507EBE0000-0x000001507EBE1000-memory.dmp
        Filesize

        4KB

        Download
      • memory/3712-52-0x000001507EB20000-0x000001507EB21000-memory.dmp
        Filesize

        4KB

        Download
      • memory/3712-64-0x000001507ED20000-0x000001507ED21000-memory.dmp
        Filesize

        4KB

        Download
      • memory/3712-66-0x000001507ED30000-0x000001507ED31000-memory.dmp
        Filesize

        4KB

        Download
      • memory/3712-68-0x000001507EE40000-0x000001507EE41000-memory.dmp
        Filesize

        4KB

        Download
      • memory/3712-67-0x000001507ED30000-0x000001507ED31000-memory.dmp
        Filesize

        4KB

        Download