Analysis
-
max time kernel
59s -
max time network
67s -
platform
windows10-2004_x64 -
resource
win10v2004-20231023-en -
resource tags
-
submitted
25/11/2023, 00:39
General
-
Target
vrs/PAYDAY3/Binaries/Win64/Custom.dll
-
Size
13.1MB
-
MD5
49c1de1ec08c976c49a889943b7964ca
-
SHA1
7d976e15f052af96a52546bffb89e166cdcdb08a
-
SHA256
2748ace7586199b4c7eee8c2ca58af1ec5f6dfcb8789714f6f2b4688d6d73711
-
SHA512
8225868619366ee644803fd89c2148f9bb85307c93554aa0eba1dd04d2d2fcdfd83b5c80ce41f2b2e88fab62afe7bc2cdee3bdcbbea9f2174d430fc27567c6a8
-
SSDEEP
196608:nCh+LvTuZZMoTN50ESUCe9U+vpZJVGoB7VmSdpWyd541YjVEl4ADmlHNLoUUJB:CgLvTu/h5DCe9U0feiVOyd5qoF6UA
Score
5/10
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\vrs\PAYDAY3\Binaries\Win64\Custom.dll,#11⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
22.9MB
-
Filesize
22.9MB
-
Filesize
22.9MB