6e83e0c682d0323703eb728f80cf43c0d88c8d06af7021176b7d7e1762ba78b1

Analysis

max time kernel
120s
max time network
120s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
05-05-2024 05:44

Target

Deceit ЧИТ/Cheat/DrankDad.dll
Size

124KB
MD5

307e31e3e0605bc281670ab44c97c4c0
SHA1

b2b7a7bb951c8158f8ab97afe04aa108def44045
SHA256

9a3e3c5dc9badbe1485fadc7f10863c70b59f9b207cf0c81589e3df0e15991cc
SHA512

3bdeddf39b2af7220d5ca4a62edc9a7a8002ebffdd1bccded34a8b05579c59ceb594eee192abc5e020b015a05a604fa44239db1f4833aaae4f1c69325a7ffd36
SSDEEP

1536:MLzkQmyIGBMTaYpUZG7eiVsaIiJWRKv4RSG5yiei6cQeSwzqrIbAPoZ4k1JieIFa:YzUcBkgG7VlcKiBp6cQR6bAPpk1t

Score

1^/10

Suspicious behavior: EnumeratesProcesses 1 IoCs

Processes:

rundll32.exe

pid process

1364 rundll32.exe

pid	process
1364	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\Deceit ЧИТ\Cheat\DrankDad.dll",#1
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:1364