Analysis

  • max time kernel
    788s
  • max time network
    801s
  • platform
    windows11-21h2_x64
  • resource
    win11-20240419-en
  • resource tags

    arch:x64arch:x86image:win11-20240419-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    22-05-2024 22:52

General

  • Target

    XcHvYYrNa_dump.dll

  • Size

    4.2MB

  • MD5

    c53fa7176a161122dbaa184db393c925

  • SHA1

    42e51ef505f55db8c5c65cfae3ccd6de94fd405b

  • SHA256

    45a4aa3075af4b3ab65f1d24fc97b70a77d14926bc3f4d3f28f968902dcf0861

  • SHA512

    729bc2be4243aa42b69cbac072d163873cccaab4d00156ab8f0ff2653afffb33812db1cad03543c2be586c234c5cf46c281f2bc66b8aa6ac0207000edf59398e

  • SSDEEP

    98304:nuRVwq1/xYKSNN+W/KmDTAFQXwj+Kla1aYNzjWw1D:CwyzSNIrePATzIzjZ

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\XcHvYYrNa_dump.dll,#1
    1⤵
      PID:760
    • C:\Windows\System32\rundll32.exe
      C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
      1⤵
        PID:2476

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • memory/760-0-0x0000000180000000-0x0000000180ACA000-memory.dmp
        Filesize

        10.8MB