Analysis
-
max time kernel
118s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
08/03/2024, 18:02
General
-
Target
e5f86cdb01ef3256b9fbf36bde7ed9ca31f098e3964d14824eb2517353015cd3.dll
-
Size
195KB
-
MD5
c24d81460e2df6cad4d1f691e7347492
-
SHA1
3d9d84f7770767f33b19c5371fa742c72ea64d71
-
SHA256
e5f86cdb01ef3256b9fbf36bde7ed9ca31f098e3964d14824eb2517353015cd3
-
SHA512
72ce9ddb983a7a6ca3e6fb550ec9afd158d50f5e164bc4c1236605576bae96462443b6433681c1c0d40356b25469ccd1eb7388535e007a24f4bdfe670d231a52
-
SSDEEP
6144:UoC1PFj0wQODX4vszHBqv22U1+0sk1A+oS:mxGq2lpGoS
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of WriteProcessMemory 7 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\e5f86cdb01ef3256b9fbf36bde7ed9ca31f098e3964d14824eb2517353015cd3.dll,#11⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\e5f86cdb01ef3256b9fbf36bde7ed9ca31f098e3964d14824eb2517353015cd3.dll,#12⤵
- Suspicious use of AdjustPrivilegeToken
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
992KB
-
Filesize
992KB
-
Filesize
992KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
172KB
-
Filesize
172KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
56KB
-
Filesize
172KB