Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
-
submitted
05/06/2024, 10:59
General
-
Target
f562e16a4f289ff1cb6f1936667aa1c52cc567fec556161ed5fde5a3d3be63b3.dll
-
Size
4.7MB
-
MD5
b42d99e209f6d0ddbaa04b7974967685
-
SHA1
f7c81e9d86aff7aac96221ce688b7afae70c4c4d
-
SHA256
f562e16a4f289ff1cb6f1936667aa1c52cc567fec556161ed5fde5a3d3be63b3
-
SHA512
47ae370048b8b55b2aeff3f0dd99c5679988dc7ebbba9a20179f62a8e71de351d0b46c38f2b5ed62bfdd9f6622537773fba23ddbdb6435b0fd8aab98bf69d779
-
SSDEEP
98304:qOtSAlbtzjT3k9Z9gUTRaygyD5fZShYpyJEFBDzH:9SAlhjT3kWsa8VfohYpyJ
Score
5/10
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\f562e16a4f289ff1cb6f1936667aa1c52cc567fec556161ed5fde5a3d3be63b3.dll,#11⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
2.6MB