3057b678f8071943d4195ad52226a38aa6c6c3a208b84e98564d9908f0998b36 | Triage

Analysis

max time kernel
157s
max time network
171s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
22-12-2023 05:36

Sharing

Report Analysis Logs

General

Target

721f878b7fc9f50a48f589e6918ba7da.dll
Size

26KB
MD5

721f878b7fc9f50a48f589e6918ba7da
SHA1

a83988a96fd09d32fc97b45f1323bb9a4bc4f8c8
SHA256

3057b678f8071943d4195ad52226a38aa6c6c3a208b84e98564d9908f0998b36
SHA512

0596fd05429786b99cd96bf6cd98b9c99715e06128ae72c179571a5d67f12e57e7cb27653df2bb9f6c91b164a2a96e555b18b11791e94565354d18c1da0a676b
SSDEEP

384:Tf+Omu+Xe7iuhd0Jt+XcCCI04YIo1HHsTT+:7/mqp/0Jtuc9I0WT

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 16 IoCs

pid	Process
4840	rundll32.exe
4840	rundll32.exe
4840	rundll32.exe
4840	rundll32.exe
4840	rundll32.exe
4840	rundll32.exe
4840	rundll32.exe
4840	rundll32.exe
4840	rundll32.exe
4840	rundll32.exe
4840	rundll32.exe
4840	rundll32.exe
4840	rundll32.exe
4840	rundll32.exe
4840	rundll32.exe
4840	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\721f878b7fc9f50a48f589e6918ba7da.dll,#1
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4840

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads