Analysis
-
max time kernel
172s -
max time network
180s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
29-12-2023 22:32
General
-
Target
05aeeea8f3048778da8f958a7714aaed.dll
-
Size
7.1MB
-
MD5
05aeeea8f3048778da8f958a7714aaed
-
SHA1
349801ea02f06269ce5b2367b82e347c2ce5d908
-
SHA256
37214fe6d2de8450a246c0f5d28b656187a3b4cb41dbbd4c362de035fcc3ceca
-
SHA512
c17baf48530dafe96031f92bfa3a75ef3e105ca017057961f4b51c71a008400f2aa66e9618f8eac6cbf0e9277f2f6f6c43a74add21fdc6d409e1a68b6d52848f
-
SSDEEP
196608:/65WGsi8BN/rtFQ88qBXLLRXP6JjiZgzFws9Lo:y5Tg7/rtWqNXRf8+gJws9s
Score
5/10
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 12 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05aeeea8f3048778da8f958a7714aaed.dll,#11⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\05aeeea8f3048778da8f958a7714aaed.dll,#12⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
12.2MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
12.2MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
924KB
-
Filesize
4KB