Analysis

  • max time kernel
    117s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    03/10/2023, 04:20

General

  • Target

    8eec6ef6a0aa8bcf7ec159277487e39d02e8b6d9903ec5a246a0a32a3bb843e2.dll

  • Size

    8.2MB

  • MD5

    4afe6223317c8baa6d393bd67f98af4f

  • SHA1

    fceb5167ea1ce8ab0fc07363f5577ed35b6e92b3

  • SHA256

    8eec6ef6a0aa8bcf7ec159277487e39d02e8b6d9903ec5a246a0a32a3bb843e2

  • SHA512

    477aa2abbdffc62244b5210087a6975f419b8d2b97a966605e73e53d85d12f8bf854ac71a76fa518c9826a9cd651fd34eed07ec9b66f411ba7c8110bb8b84180

  • SSDEEP

    196608:eys5oTENljh3O+E3rirJ2YbdMCE5Fr7NhEp:eys5oQ3jhQuTdLE5l7gp

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 2 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\8eec6ef6a0aa8bcf7ec159277487e39d02e8b6d9903ec5a246a0a32a3bb843e2.dll,#1
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:1496

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/1496-0-0x00000000779A0000-0x00000000779A2000-memory.dmp

          Filesize

          8KB

        • memory/1496-3-0x000007FEF43B0000-0x000007FEF53F6000-memory.dmp

          Filesize

          16.3MB

        • memory/1496-2-0x00000000779A0000-0x00000000779A2000-memory.dmp

          Filesize

          8KB

        • memory/1496-5-0x00000000779A0000-0x00000000779A2000-memory.dmp

          Filesize

          8KB

        • memory/1496-7-0x000007FEF43B0000-0x000007FEF53F6000-memory.dmp

          Filesize

          16.3MB

        • memory/1496-8-0x00000000777F0000-0x0000000077999000-memory.dmp

          Filesize

          1.7MB

        • memory/1496-12-0x000007FEF43B0000-0x000007FEF53F6000-memory.dmp

          Filesize

          16.3MB

        • memory/1496-13-0x00000000777F0000-0x0000000077999000-memory.dmp

          Filesize

          1.7MB

        • memory/1496-14-0x00000000777F0000-0x0000000077999000-memory.dmp

          Filesize

          1.7MB

        • memory/1496-15-0x00000000777F0000-0x0000000077999000-memory.dmp

          Filesize

          1.7MB