Analysis
-
max time kernel
140s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
10-04-2024 10:10
Behavioral task
behavioral1
Sample
2f11ca3dcc1d9400e141d8f3ee9a7a0d18e21908e825990f5c22119214fbb2f5.dll
Resource
win7-20240221-en
3 signatures
150 seconds
General
-
Target
2f11ca3dcc1d9400e141d8f3ee9a7a0d18e21908e825990f5c22119214fbb2f5.dll
-
Size
250KB
-
MD5
6ac740ebf98df7217d31cb826a207af6
-
SHA1
6bf6fc77b10f6700fa0b868f6d3515b495d1e1e0
-
SHA256
2f11ca3dcc1d9400e141d8f3ee9a7a0d18e21908e825990f5c22119214fbb2f5
-
SHA512
e0d57245047e3689f4804ed75dfcf9b1468473952a5a6bdab5ff164af1b3e5fc220ba0d737a53cb3f8318e10ef42c3ff5a5763487e2b10c785aab14eacbcde5c
-
SSDEEP
6144:Lo77pPOYfVtaoP/IbI9ezw79SycUB0Xy:LolfHHPQ6Sywi
Malware Config
Signatures
-
Detects BEATDROP loader 1 IoCs
resource yara_rule behavioral1/memory/2960-2-0x000000006BA00000-0x000000006BA48000-memory.dmp family_beatdrop -
Blocklisted process makes network request 8 IoCs
flow pid Process 4 2960 rundll32.exe 5 2960 rundll32.exe 7 2960 rundll32.exe 8 2960 rundll32.exe 9 2960 rundll32.exe 10 2960 rundll32.exe 11 2960 rundll32.exe 12 2960 rundll32.exe