2f3dd9fe96b27664d4ac558c6c538f59a04db5a3f7d1923b83473b5f7603d187

Analysis

max time kernel
118s
max time network
123s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
08/04/2024, 00:15

Target
lact/1684-0-0x0000000001D20000-0x0000000001D34000-memory_unmapped.dll
Size 80KB
Sample240408-aj39qaba64
SHA256 5edc39cbd89d3ba70a4737f823933af93f3c182134af8e34e0af9a316afaaca8
MD5 3553028b63b5608c0aff42b067977b7e
SHA1 fb1354c019ec345144e26aebfc3cf6f3a6a0a8d2
SHA512 6f0d89dedd62cecc62b06ee21b818aa16706b40f3133aaba2967bef944299285056bc17f915a777468ad1cba455cc41f6d3e09850684b24996715097c77d05e9
SSDEEP 768:0oWfTLO3B5YC0YbGuRPv87BZILqSdE8TWz7MUYqw8:UfO3ornBZdGSMNy
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2908	rundll32.exe
2908	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\lact\1684-0-0x0000000001D20000-0x0000000001D34000-memory_unmapped.dll,#1
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:2908