Analysis
-
max time kernel
119s -
max time network
138s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
26-12-2023 03:34
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
50b76bfe6eeacdc8479718788c305d19.dll
Resource
win7-20231215-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
50b76bfe6eeacdc8479718788c305d19.dll
Resource
win10v2004-20231215-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
50b76bfe6eeacdc8479718788c305d19.dll
-
Size
24KB
-
MD5
50b76bfe6eeacdc8479718788c305d19
-
SHA1
c11decb9e9d207b33546641ece766d4dfdff82b8
-
SHA256
48609475184ef8fee2f1d8eeb8f6bd61fe5a496c227fd835f8c414a0149b293e
-
SHA512
f2be2f6d64529a8303b706a840202319e953f99b72cae9edeac7b786ae10d82d93c262f7a1ceb18f2154cb85e9aa9a24888e6eb4fd39470b672952df43de2696
-
SSDEEP
192:tIvmDaTE/8USrKw7nKjL0eNoHh+JuKs3Gs2eLEk+x4ZFbJJ15iFA2D4WZUiWKHU6:unSgeLUKs3Gs2sP24XbV6A25tQTKF
Score
8/10
Malware Config
Signatures
-
Blocklisted process makes network request 1 IoCs
flow pid Process 2 2472 rundll32.exe -
Suspicious behavior: EnumeratesProcesses 40 IoCs
pid Process 2472 rundll32.exe 2472 rundll32.exe 2472 rundll32.exe 2472 rundll32.exe 2472 rundll32.exe 2472 rundll32.exe 2472 rundll32.exe 2472 rundll32.exe 2472 rundll32.exe 2472 rundll32.exe 2472 rundll32.exe 2472 rundll32.exe 2472 rundll32.exe 2472 rundll32.exe 2472 rundll32.exe 2472 rundll32.exe 2472 rundll32.exe 2472 rundll32.exe 2472 rundll32.exe 2472 rundll32.exe 2472 rundll32.exe 2472 rundll32.exe 2472 rundll32.exe 2472 rundll32.exe 2472 rundll32.exe 2472 rundll32.exe 2472 rundll32.exe 2472 rundll32.exe 2472 rundll32.exe 2472 rundll32.exe 2472 rundll32.exe 2472 rundll32.exe 2472 rundll32.exe 2472 rundll32.exe 2472 rundll32.exe 2472 rundll32.exe 2472 rundll32.exe 2472 rundll32.exe 2472 rundll32.exe 2472 rundll32.exe