Analysis Overview
SHA256
c657a0a83b60e8962a552753c3ae924772cf81a7f7100d06695432f4c117fe46
Threat Level: Known bad
The file FABCDEFGHIJKLMNOPQRSTUVWXYZABCDEFGHIJKLMNOPQRSTUVWXYZFGOPTnJQMIYlWR1cVMNPRpWHSYZZaGMKUVLDINPIE7NGsOBNhMjcB_OYQBCDIqUGNyzs.dll was found to be: Known bad.
Malicious Activity Summary
Jupyter family
Unsigned PE
MITRE ATT&CK
Analysis: static1
Detonation Overview
Reported
2023-12-17 17:37
Signatures
Jupyter family
Unsigned PE
| Description | Indicator | Process | Target |
| N/A | N/A | N/A | N/A |
Analysis: behavioral1
Detonation Overview
Submitted
2023-12-17 17:37
Reported
2023-12-17 17:39
Platform
win7-20231215-en
Max time kernel
122s
Max time network
127s
Command Line
Signatures
Processes
C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\FABCDEFGHIJKLMNOPQRSTUVWXYZABCDEFGHIJKLMNOPQRSTUVWXYZFGOPTnJQMIYlWR1cVMNPRpWHSYZZaGMKUVLDINPIE7NGsOBNhMjcB_OYQBCDIqUGNyzs.dll,#1
Network
Files
Analysis: behavioral2
Detonation Overview
Submitted
2023-12-17 17:37
Reported
2023-12-17 17:39
Platform
win10v2004-20231215-en
Max time kernel
141s
Max time network
148s
Command Line
Signatures
Processes
C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\FABCDEFGHIJKLMNOPQRSTUVWXYZABCDEFGHIJKLMNOPQRSTUVWXYZFGOPTnJQMIYlWR1cVMNPRpWHSYZZaGMKUVLDINPIE7NGsOBNhMjcB_OYQBCDIqUGNyzs.dll,#1
Network
| Country | Destination | Domain | Proto |
| NL | 52.142.223.178:80 | tcp | |
| US | 8.8.8.8:53 | 9.228.82.20.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 16.53.126.40.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 45.179.17.96.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 205.47.74.20.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 41.110.16.96.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 95.221.229.192.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 26.165.165.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 15.164.165.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 217.135.221.88.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 114.110.16.96.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 22.236.111.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 81.171.91.138.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 12.173.189.20.in-addr.arpa | udp |