Analysis

  • max time kernel
    1516s
  • max time network
    1507s
  • platform
    windows11-21h2_x64
  • resource
    win11-20240221-en
  • resource tags

    arch:x64arch:x86image:win11-20240221-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    23-02-2024 20:03

General

  • Target

    Phoenix/ICSharpCode.SharpZipLib.dll

  • Size

    243KB

  • MD5

    4fe179ef90fa134b8e564ab7ff9bd903

  • SHA1

    350090780710aa3448e2bd3b814eedefcc6026a5

  • SHA256

    d35291416c0b7dec5232486b26406f4d02da190ca8237b53542d20f24135eac7

  • SHA512

    321092782a5ddc78b3cd1b5395ae8818e0cfab762b48f0fcd9bde4b1ab9c40b374d3a910efe67e6fead3b7aecf378055c7feb97e3c8198f83a13bd6612a23411

  • SSDEEP

    6144:6Po8JC1HXfrusPX/qQCSdAFRLtaMimzXo0f:69C13fr1v/qO6yiXo

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\Phoenix\ICSharpCode.SharpZipLib.dll,#1
    1⤵
      PID:2476

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads