2b5578c87a15ef6eb56c60b59a72c6a20651572ceaaa78e7c14ccca5b575946a | Triage

Resubmissions

10-03-2024 23:24

240310-3dvdvaea44 1

10-03-2024 23:19

240310-3a9dlaeb91 1

Analysis

max time kernel
33s
max time network
38s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
10-03-2024 23:24

Sharing

Reason

Machine shutdown

Report Analysis Logs

General

Target

EMP.dll
Size

1.9MB
MD5

071b2fd20a6439f5fa61b2252b30e0ba
SHA1

d958fc3bbafe4b37cbecffdbac038b14c595718f
SHA256

2b5578c87a15ef6eb56c60b59a72c6a20651572ceaaa78e7c14ccca5b575946a
SHA512

eb29ecc0c05e217cb307f9ad7376af989e42de74e45faaeab21f875d3d42b32611b62e43c9b9dd1fd1079cf9f54cf948efd0249bbe8341740f1018aa8781705a
SSDEEP

24576:xggMy49PwJKbSleGLyC4ti91d00vEo//KWnsYE1PmLkV6:vHJ0SjL6oN0vg/5QPxw

Score

1^/10

Malware Config

Signatures

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\EMP.dll,#1
1⤵
PID:2296

C:\Windows\explorer.exe
"C:\Windows\explorer.exe"
1⤵
PID:2412

C:\Windows\system32\LogonUI.exe
"LogonUI.exe" /flags:0x0
1⤵
PID:2460

C:\Windows\system32\LogonUI.exe
"LogonUI.exe" /flags:0x1
1⤵
PID:2748

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2296-0-0x0000000013000000-0x00000000131F7000-memory.dmp

Filesize
2.0MB

Download
memory/2296-1-0x0000000013000000-0x00000000131F7000-memory.dmp

Filesize
2.0MB

Download
memory/2460-2-0x00000000029C0000-0x00000000029C1000-memory.dmp

Filesize
4KB

Download
memory/2748-3-0x00000000026E0000-0x00000000026E1000-memory.dmp

Filesize
4KB

Download