Resubmissions
18-01-2024 10:46
240118-mt9wgaadd2 718-01-2024 09:27
240118-le4v8shch2 718-01-2024 09:17
240118-k9c6bshbh2 6Analysis
-
max time kernel
149s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
-
submitted
18-01-2024 09:17
General
-
Target
$_131_/lang-1029.dll
-
Size
256KB
-
MD5
dfbb5f917ac5bf8a08615505897c12c8
-
SHA1
9d6c8cf0d78a74f52b7c8db8cecebf80f1c9720d
-
SHA256
bc669217358c2059c40f6a7fab0816afc5b9a9b4cee880bd8c9837e623718767
-
SHA512
910ec9fc7f94886936f9b04e1b35bf5d5d8948362463cfe81b1bd8253dc948ee8e6508ce654942cdab60d84ec1679808586b0ebfbadc590c3dd3fdb868df3e88
-
SSDEEP
3072:yu9yV0ws1yxbxqTjEuq+m64l0V13hcIYq80sJ0wonymZq1Mb2gzYt:1oJ413rYF
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\$_131_\lang-1029.dll,#11⤵
-
C:\Windows\system32\rundll32.exe"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe1⤵
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k UnistackSvcGroup1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB