00a4b578e46beee67c41961bc736be6d8883d5b21e937c6ca888a2f69ad5ee38 | Triage

Analysis

max time kernel
147s
max time network
150s
platform
windows11-21h2_x64
resource
win11-20240419-en
resource tags

arch:x64arch:x86image:win11-20240419-enlocale:en-usos:windows11-21h2-x64system
submitted
02/05/2024, 08:34

Sharing

Report Analysis Logs

General

Target

AsteroidPC.dll
Size

5.1MB
MD5

049cba7e87183b53c302290924507d53
SHA1

7cd56521ad68beb24ba560ff9dc610e9738aaa3b
SHA256

1b0d33a34c7a8cbfa4d57b1ab1deee8bb065b1da769ba515d03380a04a0ca8d9
SHA512

a666cbe565a70cee164a1d8bfd795dc2c5ef81f22b013ca228e7380d10b627cf04a10a9a46686fae2034b2ddb033381e0e48f52a660ea725bce6ee841739e6ef
SSDEEP

98304:ge+KjS03JDbepMuhhG1Cioz0skQvjyIPHopwJGmqz:bNjL3JDbepMuHG1CiwQQvjyIPHopwk

Score

8^/10

Malware Config

Signatures

Blocklisted process makes network request 1 IoCs

flow	pid	Process
2	2408	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\AsteroidPC.dll,#1
1⤵
- Blocklisted process makes network request
PID:2408

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads