Analysis
-
max time kernel
172s -
max time network
289s -
platform
windows11-21h2_x64 -
resource
win11-20240214-en -
resource tags
-
submitted
21/02/2024, 15:31 UTC
General
-
Target
lib/0Harmony.dll
-
Size
186KB
-
MD5
d844903eeebc7aeb66f8f496c3f04fc8
-
SHA1
2dcd60b56691454f1f25da75addd4cb2c7f08f95
-
SHA256
fad4daa6385ce3be8d57311499183aa5227fca9d53deb6ea837cabcd7bea31bc
-
SHA512
e91e0a22cc330f0d5d6857667d6ae8f603e75d3d710b3fc580873a560220f8e50b188ca2c583cb04e80d67d828134bc768e747c816d9878da7e6d6a2aec36a2b
-
SSDEEP
3072:Z4bJlQUaqpZuKOdHe0yjZ9S2j9RhuDVbuJQRZtzNw:XCOd6nS2BRhcuWT
Score
1/10
Malware Config
Signatures
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\lib\0Harmony.dll,#11⤵
Network
-
DNS175.178.17.96.in-addr.arpaRemote address:8.8.8.8:53Request175.178.17.96.in-addr.arpaIN PTRResponse175.178.17.96.in-addr.arpaIN PTRa96-17-178-175deploystaticakamaitechnologiescom -
DNS21.236.111.52.in-addr.arpaRemote address:8.8.8.8:53Request21.236.111.52.in-addr.arpaIN PTRResponse
-
DNS185.178.17.96.in-addr.arpaRemote address:8.8.8.8:53Request185.178.17.96.in-addr.arpaIN PTRResponse185.178.17.96.in-addr.arpaIN PTRa96-17-178-185deploystaticakamaitechnologiescom
-
DNSocsp.digicert.comRemote address:8.8.8.8:53Requestocsp.digicert.comIN AResponseocsp.digicert.comIN CNAMEocsp.edge.digicert.comocsp.edge.digicert.comIN CNAMEfp2e7a.wpc.2be4.phicdn.netfp2e7a.wpc.2be4.phicdn.netIN CNAMEfp2e7a.wpc.phicdn.netfp2e7a.wpc.phicdn.netIN A192.229.221.95
No results found
-
8.8.8.8:53175.178.17.96.in-addr.arpadns
DNS Request
175.178.17.96.in-addr.arpa
DNS Request
21.236.111.52.in-addr.arpa
DNS Request
185.178.17.96.in-addr.arpa
DNS Request
ocsp.digicert.com
DNS Response
192.229.221.95