Analysis
-
max time kernel
145s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
28-01-2024 06:33
Behavioral task
behavioral1
Sample
7c64ea7c4a229414b6048d18ab0836fd.dll
Resource
win7-20231215-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
7c64ea7c4a229414b6048d18ab0836fd.dll
Resource
win10v2004-20231222-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
7c64ea7c4a229414b6048d18ab0836fd.dll
-
Size
113KB
-
MD5
7c64ea7c4a229414b6048d18ab0836fd
-
SHA1
f10621be9bfee0152931f7790c2cbff022611f62
-
SHA256
d15dbfb7ef0511556a3527cc98d09145a56302bdd19a6083ee6d007af3352434
-
SHA512
84c267b63136c4304a7ddb0064afc22589273d7481dfe7b02e54893f843e72b1e743479b3019eac3bd1b2f0bd20a21dc556cfbdbdad88ab0a2627a7edf1bfa25
-
SSDEEP
1536:n1ahc4Sg6qtbxmmeBAxMlkZP2EBG53NQGzcrUbqxBtk13S8s:n1aO4V6IMJ36eEBiqtgbqidS
Score
8/10
Malware Config
Signatures
-
Blocklisted process makes network request 2 IoCs
Processes:
rundll32.exeflow pid process 20 228 rundll32.exe 48 228 rundll32.exe
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\7c64ea7c4a229414b6048d18ab0836fd.dll,#11⤵
- Blocklisted process makes network request
PID:228
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Users\Admin\AppData\Local\Temp\7c64ea7c4a229414b6048d18ab0836fd.dll,#1 37478199891⤵PID:672