Analysis

  • max time kernel
    138s
  • max time network
    156s
  • platform
    windows11-21h2_x64
  • resource
    win11-20240508-en
  • resource tags

    arch:x64arch:x86image:win11-20240508-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    06/06/2024, 14:36

General

  • Target

    The.Long.Drive.v2023.04.11c/The.Long.Drive.v2023.04.11c/The.Long.Drive.v2023.04.11c/TheLongDrive_Data/Managed/NAudio.dll

  • Size

    382KB

  • MD5

    c305a9e16a5c04eb543c6332ac4d9036

  • SHA1

    215a0eeca4315363da5ad2e076c3bd6da714eabc

  • SHA256

    15bb282a7002e10fb96e183eaa4402a9fafd85da367c490adc4901bd2e15223f

  • SHA512

    0586913e0f7fdde4ca8008e88a00d28af4456f0db741b32d17e09ed5ccb414898d94c6b34f35fcbf5fb6f9402a2bc09b20126b1122f0a9ebac67c4d422289628

  • SSDEEP

    6144:a6SREAppYdIvQ23+lQMSdNZYbbjp62FzED3u4rS55t:afzp4l23TMSdNZYbUDYt

Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\The.Long.Drive.v2023.04.11c\The.Long.Drive.v2023.04.11c\The.Long.Drive.v2023.04.11c\TheLongDrive_Data\Managed\NAudio.dll,#1
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1740
    • C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\The.Long.Drive.v2023.04.11c\The.Long.Drive.v2023.04.11c\The.Long.Drive.v2023.04.11c\TheLongDrive_Data\Managed\NAudio.dll,#1
      2⤵
        PID:2808

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads