af6a9b7e7aefeb903c76417ed2b8399b73657440ad5f8b48a25cfe5e97ff868f

Analysis

max time kernel
149s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20240412-en
resource tags

arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
submitted
25-04-2024 01:53

Target

af6a9b7e7aefeb903c76417ed2b8399b73657440ad5f8b48a25cfe5e97ff868f.dll
Size

169KB
MD5

362978ed1c1eec5ff19b744601e082a2
SHA1

9c9e834e1c38a50fc6cb3ceef4963a4a0026d5af
SHA256

af6a9b7e7aefeb903c76417ed2b8399b73657440ad5f8b48a25cfe5e97ff868f
SHA512

45fe028cfa92a88e86d5a354b84227b20f41254463a0b43328fc1a5e914e9e34bb42ef7d10e55972a24cf0a8c7b5b30045186bca5e9e0bc94fecb0e301b2e44e
SSDEEP

3072:QMpYuPV2KxPQSDYGQHKLDg5wF1L0D9goAP9TyjCyB5fS:QfuYMPQSDmHaDHF14DfA1yCyBlS

Score

1^/10

Suspicious behavior: EnumeratesProcesses 4 IoCs

Processes:

rundll32.exe

pid process

4916 rundll32.exe
4916 rundll32.exe
4916 rundll32.exe
4916 rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\af6a9b7e7aefeb903c76417ed2b8399b73657440ad5f8b48a25cfe5e97ff868f.dll,#1
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4916