92568303c5f9880d3c36c8f1e25516f1d51809598394fcc3b39f3cf36afd03d5 | Triage

Analysis

max time kernel
118s
max time network
122s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
04-03-2024 08:35

Sharing

Report Analysis Logs

General

Target

__TEMP/update.dll
Size

400KB
MD5

01cbaddd7a269521bf7b80f4a9a1982f
SHA1

cb5f9111abc6c74f507fd6a6c3c6608279105177
SHA256

ae99ef9475cf553e3396419f08faec8b7965cb1fdd2f08d42dd190e376c445e0
SHA512

bd896a2e7848b65c1e90772b1f2729df7a7290969831e09e11c99071feb009dbd35de26dccde4ce025249be1f15c1171e82f34b96c58d620ec94ece2e702aa30
SSDEEP

6144:HK7/NWA+n975aKg3HwL3UDB7ZXxvDIw6u/S+273GpohFr2dkiA:q7VWA+975aKc2iBBxsXzMofVi

Score

8^/10

Malware Config

Signatures

Blocklisted process makes network request 1 IoCs

Processes:

rundll32.exe

flow pid process

3 1084 rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\__TEMP\update.dll,#1
1⤵
- Blocklisted process makes network request
PID:1084

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...