Analysis
-
max time kernel
1784s -
max time network
1164s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
11-02-2024 15:36
General
-
Target
x86/plugins/ExtendedNotifications.dll
-
Size
120KB
-
MD5
56cc0204d69be9fe0987f6570783a138
-
SHA1
f6024adbc00c3caef570331a82ce9535ddafd51d
-
SHA256
c1a74caa7da222a78715d4307f6247cb8aba4cb01434286e17d9cb18860aa612
-
SHA512
86ee5535ee14cd55940d4562edf0f744410ad46fdcb7256552755412242e3ece02564ad577d3d3a4de75c497a8ece67cc690f4b7b76abfd37b8129d750c2069d
-
SSDEEP
3072:lQSnPFFFd7h7ZpcotN5grnrzAjixjIZo/dgo:lxnPTFZ17AFxqo
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\x86\plugins\ExtendedNotifications.dll,#11⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\x86\plugins\ExtendedNotifications.dll,#12⤵
-
-
C:\Windows\system32\rundll32.exe"C:\Windows\system32\rundll32.exe" "C:\Windows\SYSTEM32\EDGEHTML.dll",#141 Microsoft.VCLibs.140.00_8wekyb3d8bbwe1⤵
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k UnistackSvcGroup1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB