50e0b903ed6c52a07d413228c0e9081f410adf2b80e9eea79d809b2a82ef85f7 | Triage

Analysis

max time kernel
135s
max time network
171s
platform
windows11-21h2_x64
resource
win11-20240221-en
resource tags

arch:x64arch:x86image:win11-20240221-enlocale:en-usos:windows11-21h2-x64system
submitted
24/02/2024, 08:38

Sharing

Report Analysis Logs

General

Target

LorexCloud/SPSSModel.dll
Size

1.9MB
MD5

c202b734de152b8fe3156042106bca76
SHA1

2cbcb6aa8c595a86ad1b722ed83fe835bc29f451
SHA256

38f3d64f0e3e2b3398062ce8ddaa795b250186ebf77a5fe54ad419969283b7d2
SHA512

e2cfd5dfdd4d603b5f5924f01456193cc3c482ee772840a3b900bc94d38caf39891d89f2c61e99552ce407be51613f5aa2fff0a0fb46bd738656fc1d413d9e0a
SSDEEP

24576:HTdDzpzwDUf7V/w0vRa0pFmdOpOGxSQ5jPPNHl4S4:HTd/Ff7V/PvRMOpOGxSQ5jPdq

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 5 IoCs

pid	Process
240	rundll32.exe
240	rundll32.exe
240	rundll32.exe
240	rundll32.exe
240	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\LorexCloud\SPSSModel.dll,#1
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:240

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/240-0-0x000000006BFF0000-0x000000006C53B000-memory.dmp

Filesize
5.3MB

Download
memory/240-1-0x00007FFB5EE10000-0x00007FFB5EF22000-memory.dmp

Filesize
1.1MB

Download