Analysis
-
max time kernel
122s -
max time network
137s -
platform
windows7_x64 -
resource
win7-20231023-en -
resource tags
-
submitted
08-11-2023 03:15
General
-
Target
Rootkits/2141974f665f4d8fecb6d8ea06add624b57f320f901368847175570ee716fd8e.dll
-
Size
2.0MB
-
MD5
8d54e4abe1762f96134a0c874cfb8cdc
-
SHA1
336f3fb4baa098ea4f54d881f2a2cf696e37c44e
-
SHA256
2141974f665f4d8fecb6d8ea06add624b57f320f901368847175570ee716fd8e
-
SHA512
fad6791b7f5071c4958041cb50e92af298544d8a6907b82afe44717e3047426e56ff02b4ed61a40af405ae5c1ead9cb688660d87ca92295e7ded4a1158e62704
-
SSDEEP
24576:jBm2D0GlV7LJMLMVSBsalgydd4jnYnyeiRy:M2D0mV76LMV1algAkYP
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\Rootkits\2141974f665f4d8fecb6d8ea06add624b57f320f901368847175570ee716fd8e.dll,#11⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/2236-0-0x000007FEF6490000-0x000007FEF6747000-memory.dmpFilesize
2.7MB
-
memory/2236-1-0x000007FEF61D0000-0x000007FEF6487000-memory.dmpFilesize
2.7MB
-
memory/2236-2-0x000007FEF6490000-0x000007FEF6747000-memory.dmpFilesize
2.7MB
-
memory/2236-3-0x00000000779A0000-0x0000000077B49000-memory.dmpFilesize
1.7MB
-
memory/2236-4-0x0000000077770000-0x0000000077771000-memory.dmpFilesize
4KB
-
memory/2236-5-0x00000000779A0000-0x0000000077B49000-memory.dmpFilesize
1.7MB