Analysis
-
max time kernel
140s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20240412-en -
resource tags
arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system -
submitted
19-04-2024 18:20
Behavioral task
behavioral1
Sample
b369ed704c293b76452ee1bdd99a69bbb76b393a4a9d404e0b5df59a00cff074.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b369ed704c293b76452ee1bdd99a69bbb76b393a4a9d404e0b5df59a00cff074.dll
Resource
win10v2004-20240412-en
General
-
Target
b369ed704c293b76452ee1bdd99a69bbb76b393a4a9d404e0b5df59a00cff074.dll
-
Size
46KB
-
MD5
20a1b981278554db005802d4d8e82596
-
SHA1
eaa9172c1cd7f38b17a5e8e952cfff6f5fe6a741
-
SHA256
b369ed704c293b76452ee1bdd99a69bbb76b393a4a9d404e0b5df59a00cff074
-
SHA512
63f8d3dae6ba43068962c02a54d560281aa4caf46b1c22b977ba89be975c744c1ea00b67d8e35cbcd8afbf01829e6033b536479d332c6acbc8ed0159ee6a70d1
-
SSDEEP
768:YMWqDAZLIY2vSDNBDHtsM+/KC9FY1XPEWFXJzuxUknWJbe57xUMvmPPBKPPELYaN:YFqDAZLIY2vShBDHts/99FY1XnQtncbK
Malware Config
Signatures
-
Blocklisted process makes network request 14 IoCs
Processes:
rundll32.exeflow pid process 33 4784 rundll32.exe 34 4784 rundll32.exe 37 4784 rundll32.exe 49 4784 rundll32.exe 50 4784 rundll32.exe 51 4784 rundll32.exe 59 4784 rundll32.exe 60 4784 rundll32.exe 62 4784 rundll32.exe 77 4784 rundll32.exe 78 4784 rundll32.exe 79 4784 rundll32.exe 80 4784 rundll32.exe 81 4784 rundll32.exe