6214e19836c0c3c4bc94e23d6391c45ad87fdd890f6cbd3ab078650455c31dc8 | Triage

Analysis

max time kernel
139s
max time network
151s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
10-04-2024 11:26

Sharing

Report Analysis Logs

General

Target

Attachments.dll
Size

2.2MB
MD5

555b77d23549e231c8d7f0b003cc5164
SHA1

afde458ab0294f206a5cf832ce4e73661b0308f8
SHA256

9fd92b2633147d58a5d4a28d1f5f66a11873c4185c44429295cda9956defa6d4
SHA512

a2d918e62fa320e73649099d3e15aa9790b39e878c965487e4621d5851d3d867f3b650470849e5518b40f99db0cbf9030807df59b476db266e5ae21b48d65384
SSDEEP

49152:wACKBYY7RFBiT6EdtaKBrTUR88VKIMUqPGZZNyc:/F4aKuR88lMU1Zzyc

Score

8^/10

Malware Config

Signatures

Blocklisted process makes network request 4 IoCs

flow	pid	Process
2	1924	rundll32.exe
5	1924	rundll32.exe
6	1924	rundll32.exe
7	1924	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\Attachments.dll,#1
1⤵
- Blocklisted process makes network request
PID:1924

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1924-0-0x000000007FFF0000-0x000000007FFF1000-memory.dmp

Filesize
4KB

Download