Analysis
-
max time kernel
3s -
max time network
6s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
11-04-2024 13:57
Static task
static1
Behavioral task
behavioral1
Sample
ae99ef9475cf553e3396419f08faec8b7965cb1fdd2f08d42dd190e376c445e0.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ae99ef9475cf553e3396419f08faec8b7965cb1fdd2f08d42dd190e376c445e0.dll
Resource
win10v2004-20240226-en
General
-
Target
ae99ef9475cf553e3396419f08faec8b7965cb1fdd2f08d42dd190e376c445e0.dll
-
Size
400KB
-
MD5
01cbaddd7a269521bf7b80f4a9a1982f
-
SHA1
cb5f9111abc6c74f507fd6a6c3c6608279105177
-
SHA256
ae99ef9475cf553e3396419f08faec8b7965cb1fdd2f08d42dd190e376c445e0
-
SHA512
bd896a2e7848b65c1e90772b1f2729df7a7290969831e09e11c99071feb009dbd35de26dccde4ce025249be1f15c1171e82f34b96c58d620ec94ece2e702aa30
-
SSDEEP
6144:HK7/NWA+n975aKg3HwL3UDB7ZXxvDIw6u/S+273GpohFr2dkiA:q7VWA+975aKc2iBBxsXzMofVi
Malware Config
Signatures
-
Blocklisted process makes network request 1 IoCs
Processes:
rundll32.exeflow pid process 3 2240 rundll32.exe