5044dc59bf63400c7977395c73fba541eb79d5effb4a52c3784dbebd96e8e5b7 | Triage

Analysis

max time kernel
0s
max time network
20s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
06-03-2024 01:21

Sharing

Report Analysis Logs

General

Target

$APPDATA/ScanGuard/updates/SAVAPI 11.0.1/aerdl.dll
Size

1.1MB
MD5

62f7467baebb56a8beea7fffa6c4ee7c
SHA1

c13eb821d2675f110b1a38f8c0842b91edcab9b4
SHA256

d049ab67daae27ab3840730cadc5a82dfbd269b58896b9f8289324816e1680eb
SHA512

d31498bdee77fd498226d6c971dff65eeecec66811109f1a729858fee6aa92f6d1601256740417ba5abb72b4c7109eb3e69ecc7446093bebee62c559d4e7a61a
SSDEEP

24576:8lGo7gc5YfW4W2ERk7IERLQw33gAcRRbfQ:xo5d4WPR7GLhofbfQ

Score

1^/10

Malware Config

Signatures

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\$APPDATA\ScanGuard\updates\SAVAPI 11.0.1\aerdl.dll",#1
1⤵
PID:4512
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe "C:\Users\Admin\AppData\Local\Temp\$APPDATA\ScanGuard\updates\SAVAPI 11.0.1\aerdl.dll",#1
  2⤵
  PID:2660

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads