Analysis
-
max time kernel
128s -
max time network
133s -
platform
windows10-2004_x64 -
resource
win10v2004-20231127-en -
resource tags
arch:x64arch:x86image:win10v2004-20231127-enlocale:en-usos:windows10-2004-x64system -
submitted
28/11/2023, 04:02
Static task
static1
Behavioral task
behavioral1
Sample
a2c570588f3a8f2f7942689ba613b8800761cb9831e005fbcb81b8992e9548ee.dll
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
a2c570588f3a8f2f7942689ba613b8800761cb9831e005fbcb81b8992e9548ee.dll
Resource
win10v2004-20231127-en
General
-
Target
a2c570588f3a8f2f7942689ba613b8800761cb9831e005fbcb81b8992e9548ee.dll
-
Size
1.0MB
-
MD5
e13e9de4937509febb1daa4dd2cfe848
-
SHA1
819c6ff2df833ef95b575e440339a9c8c370c47a
-
SHA256
a2c570588f3a8f2f7942689ba613b8800761cb9831e005fbcb81b8992e9548ee
-
SHA512
6e872a516b732d427db6c00f65024ff33fd1061112fbdeb23dfb65fe88cf218dfdd2c9a6c47082957d1cc4d97d236806be817e5eb769ece805089ac204ec827e
-
SSDEEP
24576:F2W0YAaVo8oP3KpWmhnOdrj1Nf2NAxHji2+axUZr/D/YAz82U:P0YAaVo8oP3KpuZj3QcG2jGnYAL
Malware Config
Signatures
-
Drops file in Windows directory 1 IoCs
description ioc Process File opened for modification C:\Windows\kdfgdfgdfhfed rundll32.exe -
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 4300 rundll32.exe 4300 rundll32.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
31B
MD563d438d17dbb461e73df0311ab760c87
SHA18617e50e48826cec62f46fe4a1762cb32ac76b97
SHA25633f89a91290eb1651c883d204e9cf23e603b571e553e522f6051c4879729bfd3
SHA512bd27ba601f0ebbff7629e0524dcc28a1a8b2be0fe2fc33e5e25a4f4ecf7e1e24848d7a8ea67247acf2299bf2390eb565d9d35475fb152c95bbbdcad2aca028d6