2f3dd9fe96b27664d4ac558c6c538f59a04db5a3f7d1923b83473b5f7603d187

Analysis

max time kernel
120s
max time network
124s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
08/04/2024, 00:15

Target

lact/1364-1-0x0000020751220000-0x0000020751234000-memory_unmapped.dll
Size

80KB
MD5

7a1a48e5526e096dad8a155bd009ea94
SHA1

90c423f7af788937665fb7c28dc03468be15b064
SHA256

5562c6ad5765792def276e009395a57a6bf841c87cddefb6f8e8d75b74076e83
SHA512

dd7c9fd8b6bc84ffec49aac30c5d060ee34d05bee6a5b21ea90bcf1547d10f7cd2fc20bdf0efc4848ec2bd8d0cc448c332192e00bd2113c3f312124516c514e8
SSDEEP

768:ai0IIO99dKJKbAoQVuyQw4n4mjlQmLvniWiMfDeDvf1v:WpO9CJKjQF4n4mjltqTMKD1

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1268	rundll32.exe
1268	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\lact\1364-1-0x0000020751220000-0x0000020751234000-memory_unmapped.dll,#1
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:1268