2f3dd9fe96b27664d4ac558c6c538f59a04db5a3f7d1923b83473b5f7603d187

Analysis

max time kernel
120s
max time network
124s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
08/04/2024, 00:15

Target

lact/2100-2-0x00000000003A0000-0x00000000003B3000-memory_unmapped.dll
Size

76KB
MD5

644a7a3e8ba5b6bad4e3e194bdd09e21
SHA1

a4d12b22991572b5f01cd352f9ebe5d6738e1de6
SHA256

d8b902568386f588fb2d42a77cd39062ada13c9a3fed0adf20ab6510f3b4a681
SHA512

0d4ee8bd838a3d3f6c5a9786b59b1f899df361e1334208489b534aac93f7d1f7804cfbb833f529175aa9385a7bf1cc36d5ba3daa65588770e6176e277f1e32f7
SSDEEP

768:cO+qDlWGT9NVv48up+g5KFNhhlJwb9Lf2hs1z+Wvvy:v+qD4U2/5KFhrmVf2hs1zdvy

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3020	rundll32.exe
3020	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\lact\2100-2-0x00000000003A0000-0x00000000003B3000-memory_unmapped.dll,#1
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:3020