Resubmissions
14-11-2023 17:31
231114-v3qg7acf42 1014-11-2023 17:21
231114-vxdw7sdg61 1028-10-2023 19:29
231028-x7cs1age56 1024-10-2023 13:29
231024-qrn3rsdb6z 1018-10-2023 12:04
231018-n8ybnaeb31 1007-09-2023 12:10
230907-pce1wahe2x 10Analysis
-
max time kernel
542s -
max time network
548s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
-
submitted
18-10-2023 12:04
General
-
Target
c0ca77690ad65d797c3c9a662229046b0cc28e89ca54e0e39c70f656201280a5.dll
-
Size
33KB
-
MD5
08b01dbf65a1e91923e94e128cd972b8
-
SHA1
39f4350c50bb190e14d9ca6fa4ab479c1d5bed04
-
SHA256
c0ca77690ad65d797c3c9a662229046b0cc28e89ca54e0e39c70f656201280a5
-
SHA512
82845810f75c19e7792bdb5e5601f2f976c7539393c822190234fe9bef0d9497433d09f85afc5bb84e789fae4a6f25cc335becaf6b4875ecbc2c28e754aef415
-
SSDEEP
768:k+aoi6qZOpQB5ZpOc06HCMN9GT6RJ5BHUEy2YEZZEo:k+av6qZ4QxpP0AtNfRJ5BHxY
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\c0ca77690ad65d797c3c9a662229046b0cc28e89ca54e0e39c70f656201280a5.dll,#11⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\c0ca77690ad65d797c3c9a662229046b0cc28e89ca54e0e39c70f656201280a5.dll,#12⤵
- Suspicious use of AdjustPrivilegeToken
-