Analysis
-
max time kernel
149s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
25-12-2023 03:31
General
-
Target
033810b36c9f01677a5e450044ee9325.dll
-
Size
406KB
-
MD5
033810b36c9f01677a5e450044ee9325
-
SHA1
afc88f4cead9e5a10a472a2491b9d92ad6b2205f
-
SHA256
bdc5a1cf991cf18ad72ddd7ce05ad26b9bc5563e8ee80ec3ba9e644db6fe53bf
-
SHA512
3817b376b9df63604aa754ccff3739fc87d94b5ceb469f9df407ed1f08bae33d1719b68b81b1c2cfd4a1db4318f88a0cfdb858f6145f22996c9f85615f5aaf84
-
SSDEEP
12288:zWewL/wxCQcO4Q9etbdaeGWZYKqqKysqMBi29:zW8w24QybdSUJqq2Bz9
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
-
Suspicious use of SendNotifyMessage 1 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\033810b36c9f01677a5e450044ee9325.dll,#11⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\033810b36c9f01677a5e450044ee9325.dll,#12⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
400KB
-
Filesize
1.3MB
-
Filesize
4KB
-
Filesize
960KB
-
Filesize
64KB
-
Filesize
1.3MB
-
Filesize
64KB
-
Filesize
960KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
1.3MB