Analysis

  • max time kernel
    128s
  • max time network
    133s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231127-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231127-enlocale:en-usos:windows10-2004-x64system
  • submitted
    28/11/2023, 04:02

General

  • Target

    a2c570588f3a8f2f7942689ba613b8800761cb9831e005fbcb81b8992e9548ee.dll

  • Size

    1.0MB

  • MD5

    e13e9de4937509febb1daa4dd2cfe848

  • SHA1

    819c6ff2df833ef95b575e440339a9c8c370c47a

  • SHA256

    a2c570588f3a8f2f7942689ba613b8800761cb9831e005fbcb81b8992e9548ee

  • SHA512

    6e872a516b732d427db6c00f65024ff33fd1061112fbdeb23dfb65fe88cf218dfdd2c9a6c47082957d1cc4d97d236806be817e5eb769ece805089ac204ec827e

  • SSDEEP

    24576:F2W0YAaVo8oP3KpWmhnOdrj1Nf2NAxHji2+axUZr/D/YAz82U:P0YAaVo8oP3KpuZj3QcG2jGnYAL

Score
4/10

Malware Config

Signatures

  • Drops file in Windows directory 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\a2c570588f3a8f2f7942689ba613b8800761cb9831e005fbcb81b8992e9548ee.dll,#1
    1⤵
    • Drops file in Windows directory
    • Suspicious behavior: EnumeratesProcesses
    PID:4300

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Windows\kdfgdfgdfhfed

          Filesize

          31B

          MD5

          63d438d17dbb461e73df0311ab760c87

          SHA1

          8617e50e48826cec62f46fe4a1762cb32ac76b97

          SHA256

          33f89a91290eb1651c883d204e9cf23e603b571e553e522f6051c4879729bfd3

          SHA512

          bd27ba601f0ebbff7629e0524dcc28a1a8b2be0fe2fc33e5e25a4f4ecf7e1e24848d7a8ea67247acf2299bf2390eb565d9d35475fb152c95bbbdcad2aca028d6