Analysis
-
max time kernel
303s -
max time network
532s -
platform
windows10-2004_x64 -
resource
win10v2004-20231023-en -
resource tags
-
submitted
08-11-2023 03:15
General
-
Target
Rootkits/2141974f665f4d8fecb6d8ea06add624b57f320f901368847175570ee716fd8e.dll
-
Size
2.0MB
-
MD5
8d54e4abe1762f96134a0c874cfb8cdc
-
SHA1
336f3fb4baa098ea4f54d881f2a2cf696e37c44e
-
SHA256
2141974f665f4d8fecb6d8ea06add624b57f320f901368847175570ee716fd8e
-
SHA512
fad6791b7f5071c4958041cb50e92af298544d8a6907b82afe44717e3047426e56ff02b4ed61a40af405ae5c1ead9cb688660d87ca92295e7ded4a1158e62704
-
SSDEEP
24576:jBm2D0GlV7LJMLMVSBsalgydd4jnYnyeiRy:M2D0mV76LMV1algAkYP
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\Rootkits\2141974f665f4d8fecb6d8ea06add624b57f320f901368847175570ee716fd8e.dll,#11⤵
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/3644-0-0x00007FFAA3DE0000-0x00007FFAA4097000-memory.dmpFilesize
2.7MB
-
memory/3644-1-0x00007FFAC2C10000-0x00007FFAC2E05000-memory.dmpFilesize
2.0MB
-
memory/3644-2-0x00007FFAC2C10000-0x00007FFAC2E05000-memory.dmpFilesize
2.0MB
-
memory/3644-3-0x00007FFAC2C00000-0x00007FFAC2C01000-memory.dmpFilesize
4KB
-
memory/3644-4-0x00007FFAC2C10000-0x00007FFAC2E05000-memory.dmpFilesize
2.0MB