Analysis
-
max time kernel
132s -
max time network
127s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
05-06-2024 10:59
General
-
Target
f562e16a4f289ff1cb6f1936667aa1c52cc567fec556161ed5fde5a3d3be63b3.dll
-
Size
4.7MB
-
MD5
b42d99e209f6d0ddbaa04b7974967685
-
SHA1
f7c81e9d86aff7aac96221ce688b7afae70c4c4d
-
SHA256
f562e16a4f289ff1cb6f1936667aa1c52cc567fec556161ed5fde5a3d3be63b3
-
SHA512
47ae370048b8b55b2aeff3f0dd99c5679988dc7ebbba9a20179f62a8e71de351d0b46c38f2b5ed62bfdd9f6622537773fba23ddbdb6435b0fd8aab98bf69d779
-
SSDEEP
98304:qOtSAlbtzjT3k9Z9gUTRaygyD5fZShYpyJEFBDzH:9SAlhjT3kWsa8VfohYpyJ
Score
5/10
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\f562e16a4f289ff1cb6f1936667aa1c52cc567fec556161ed5fde5a3d3be63b3.dll,#11⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=4036,i,10373433614523925616,13586256558317053467,262144 --variations-seed-version --mojo-platform-channel-handle=1960 /prefetch:81⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.6MB
-
Filesize
8KB