Analysis

  • max time kernel
    120s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    13-10-2023 12:27

General

  • Target

    8bd389d6322f89b249dd3e303d09117979ac8df8215156a41eccc64ebeeb8314.dll

  • Size

    11KB

  • MD5

    f40a8148b393d837f016cdf6ce1211ae

  • SHA1

    fcba3d9c9b34979570f0cddc0a0204f29cd3cd81

  • SHA256

    8bd389d6322f89b249dd3e303d09117979ac8df8215156a41eccc64ebeeb8314

  • SHA512

    89d064697ecfbc452881d26dcbda794dbb2b66b7f0d29b865b1601dea0de28e90e7423718caf789c04f0bb2ca57bfedeec65887ebd7073c0c79f4ddd60d8c608

  • SSDEEP

    192:C/yJLhR64S5v6O7OT/2f/hqwMkkYj273QJXZHfB:uyJLv/O7aQMkZa7gJX9B

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\8bd389d6322f89b249dd3e303d09117979ac8df8215156a41eccc64ebeeb8314.dll,#1
    1⤵
      PID:2092

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2092-0-0x000007FEFB2F0000-0x000007FEFB2FD000-memory.dmp

      Filesize

      52KB

    • memory/2092-2-0x000007FEFB2F0000-0x000007FEFB2FD000-memory.dmp

      Filesize

      52KB

    • memory/2092-1-0x000007FEFB2E0000-0x000007FEFB2ED000-memory.dmp

      Filesize

      52KB