Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240221-en -
resource tags
-
submitted
21/02/2024, 18:11 UTC
General
-
Target
infos/Managed/System.dll
-
Size
1.0MB
-
MD5
23726881ef51d4097769e2cbf29c826a
-
SHA1
a75c50eebd3da61d821b8e45fcd1d7919ec0ba0b
-
SHA256
b8517e9e87db7d45525e5ac82cb4f9dcd77aadb3a8c159d1b1ec0df3ff388dd6
-
SHA512
aa1a76bba1ff7047469a1b726e7d1d603c11e6e8a4bfe5469859564566994d781e5bb91357924249ba9ab8ff64a2ad058e78129296d1fe824d7b4cd9ba914786
-
SSDEEP
24576:gvKCuaUIERHhTCzPIH98RlreZgkNoJXfBKsClf6ott50VIZwrJG8MAFPGmSu:gyCPvBSZwrJG8MAFPGm
Score
1/10
Malware Config
Signatures
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\infos\Managed\System.dll,#11⤵
Network
-
DNS4.159.190.20.in-addr.arpaRemote address:8.8.8.8:53Request4.159.190.20.in-addr.arpaIN PTRResponse -
DNS43.58.199.20.in-addr.arpaRemote address:8.8.8.8:53Request43.58.199.20.in-addr.arpaIN PTRResponse
-
DNS177.178.17.96.in-addr.arpaRemote address:8.8.8.8:53Request177.178.17.96.in-addr.arpaIN PTRResponse177.178.17.96.in-addr.arpaIN PTRa96-17-178-177deploystaticakamaitechnologiescom
-
DNS11.227.111.52.in-addr.arpaRemote address:8.8.8.8:53Request11.227.111.52.in-addr.arpaIN PTRResponse
-
DNS26.73.42.20.in-addr.arpaRemote address:8.8.8.8:53Request26.73.42.20.in-addr.arpaIN PTRResponse
No results found
-
8.8.8.8:534.159.190.20.in-addr.arpadns
DNS Request
4.159.190.20.in-addr.arpa
-
8.8.8.8:5343.58.199.20.in-addr.arpadns
DNS Request
43.58.199.20.in-addr.arpa
-
8.8.8.8:53177.178.17.96.in-addr.arpadns
DNS Request
177.178.17.96.in-addr.arpa
-
8.8.8.8:5311.227.111.52.in-addr.arpadns
DNS Request
11.227.111.52.in-addr.arpa
-
8.8.8.8:5326.73.42.20.in-addr.arpadns
DNS Request
26.73.42.20.in-addr.arpa