Analysis
-
max time kernel
155s -
max time network
163s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
14/01/2024, 13:51
General
-
Target
ZdDll.dll
-
Size
52KB
-
MD5
1614dc6d55ae797eacae6955ec4a9d75
-
SHA1
ab5fa9dcb4447ee963b7eaa47be8ed726b7e0a2b
-
SHA256
41d1c18dbdd162c9ebf820cb09188e8b7b5852260bb5755551d66a6157ea2708
-
SHA512
282960296002c9a6e8c62996aacd015acde14468e765820813f600feae142a18473fdb96ef32bac0c39660e5e3e5af2a04fbf237adeea87054fb3edc548776e9
-
SSDEEP
1536:ZDTMIxRDQD17Onwi0hpDL/3D+hqfha9KIOH:ZD4Ixw1z/rDL/3DkSha9uH
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\ZdDll.dll,#11⤵
-
C:\Windows\system32\rundll32.exe"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe1⤵
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k UnistackSvcGroup1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
16KB
MD5d684a37ff60d7b2998ec8ef9f39f8b18
SHA1e669c2891962cadc43640d58f15a456fae34b02c
SHA2562f043d02f344a40b19cb8d4906ee209ac7446b5180bca3fa2075a1bd5cbbcef2
SHA51205de40688eddca30ea4429ca3e406808361b1385543b8524dbba057f20dff6196694a9de8e42fb0a55c343ae3714e782a32d9e23bbe0648e06cc0b8818c2b4ec
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB