6214e19836c0c3c4bc94e23d6391c45ad87fdd890f6cbd3ab078650455c31dc8 | Triage

Analysis

max time kernel
139s
max time network
161s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
10-04-2024 11:26

Sharing

Report Analysis Logs

General

Target

Attachments.dll
Size

2.2MB
MD5

555b77d23549e231c8d7f0b003cc5164
SHA1

afde458ab0294f206a5cf832ce4e73661b0308f8
SHA256

9fd92b2633147d58a5d4a28d1f5f66a11873c4185c44429295cda9956defa6d4
SHA512

a2d918e62fa320e73649099d3e15aa9790b39e878c965487e4621d5851d3d867f3b650470849e5518b40f99db0cbf9030807df59b476db266e5ae21b48d65384
SSDEEP

49152:wACKBYY7RFBiT6EdtaKBrTUR88VKIMUqPGZZNyc:/F4aKuR88lMU1Zzyc

Score

8^/10

Malware Config

Signatures

Blocklisted process makes network request 4 IoCs

flow	pid	Process
2	2308	rundll32.exe
34	2308	rundll32.exe
43	2308	rundll32.exe
49	2308	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\Attachments.dll,#1
1⤵
- Blocklisted process makes network request
PID:2308

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2308-0-0x00007FFD893C0000-0x00007FFD893D0000-memory.dmp

Filesize
64KB

Download