2f3dd9fe96b27664d4ac558c6c538f59a04db5a3f7d1923b83473b5f7603d187

Analysis

max time kernel
121s
max time network
125s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
08/04/2024, 00:15

Target
lact/1636-0-0x00000000003A0000-0x00000000003B3000-memory_unmapped.dll
Size 76KB
Sample240408-aj39qaba64
SHA256 9e7fdc17150409d594eeed12705788fbc74b5c7f482a64d121395df781820f46
MD5 7d3984674aec72426e2dcbd38539c54a
SHA1 3548610228011247d1e2edc962219466cca9a1a9
SHA512 4cfc28c58d4b30de125b43af0558ccdce07531c91c2fb3a405122736c1f429c3b9dd8d44899058eb4e7409cb1231ce82c104ee32b094de025cb40547099ca2b5
SSDEEP 768:UiC/DyfvDF9JN137zub7+IJSuCMajTiAmPbjQL5Nhs1+igyX9MDy:7C/DivXBOJSuwjFmz0Lvhs13gyX9MG
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3000	rundll32.exe
3000	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\lact\1636-0-0x00000000003A0000-0x00000000003B3000-memory_unmapped.dll,#1
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:3000