Resubmissions

15/04/2024, 17:37

240415-v66nksed8w 7

15/04/2024, 17:34

240415-v5ll1sed3z 7

15/04/2024, 17:30

240415-v3fmzsca66 3

15/04/2024, 17:27

240415-v1vdcseb8w 7

Analysis

  • max time kernel
    30s
  • max time network
    31s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240412-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
  • submitted
    15/04/2024, 17:37

General

  • Target

    WindowsPowerShell/v1.0/Modules/MsDtc/en/Microsoft.Dtc.PowerShell.Resources.dll

  • Size

    13KB

  • MD5

    e4df90972e425f0a0cb22cde25306d73

  • SHA1

    1f8bfa94def88b2680fcdd33a12a49feacf92dc3

  • SHA256

    35f74d9c4b991c40f7d786ac334f5fbc9a5f043355d49a6630af7ae02c76f9dd

  • SHA512

    ddf6ee3a1fd33eb7243798abdddcec8e4ba4f34b3bfc28a03d3ca76f61b63140bdd8d5dad793ef56477d9810fae3b408887914bed3d321d1178e1f727b7066eb

  • SSDEEP

    192:uW4FXXQgxR0L/Vzd73oX0i/6L/TyFegtqgUGkpsmwWbVKW:uXFdRcdzp3oX0iUwolps/WbVKW

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\WindowsPowerShell\v1.0\Modules\MsDtc\en\Microsoft.Dtc.PowerShell.Resources.dll,#1
    1⤵
      PID:996

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads