b6138bd31f0930d6f489ac8ef0dad8333b30bcebc51c0940b19ab4cb3ffbab73

Analysis

max time kernel
120s
max time network
123s
platform
windows7_x64
resource
win7-20240611-en
resource tags

arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
submitted
12/06/2024, 04:33

Target
SystemClockHook_x64.dll
Size 257KB
Sample240612-e6wkls1cnp
SHA256 51c326343e505706ec3c72ba8c9e1fb114b6b2726dd19ab1e41e2bce8c179d23
MD5 2b74042ee8dbd812f9be1458b5eb83b5
SHA1 c493e439b61cbb4f552291b078fa08e61bae43c9
SHA512 6c9c0fd770c357a440a0f3b0c235ab02184ab3dc060482ed3fb2caf970560c4dd6361096021457cf4981a1d6c75d425754cddb434027a0fb057051fbe00caf61
SSDEEP 6144:94leAGyEHTfGJdgvPVES0/4AFonQBG/82Pdn:jAbEHTuJaX4/4AFyQk/82Pdn
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2148	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\SystemClockHook_x64.dll,#1
1⤵
- Suspicious use of FindShellTrayWindow
PID:2148