Analysis
-
max time kernel
142s -
max time network
142s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
07-07-2024 16:14
Behavioral task
behavioral1
Sample
efc39bd3b09f55646a4d7e3be60313a9.dll
Resource
win7-20240704-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
efc39bd3b09f55646a4d7e3be60313a9.dll
Resource
win10v2004-20240704-en
windows10-2004-x64
3 signatures
150 seconds
General
-
Target
efc39bd3b09f55646a4d7e3be60313a9.dll
-
Size
5.7MB
-
MD5
efc39bd3b09f55646a4d7e3be60313a9
-
SHA1
dab20eab5209f92245744340c5618af283591b33
-
SHA256
7dfb8b5feb42853a7da25d04f0bbb5cdb325423a397969beb14b89370094d5b0
-
SHA512
a0edd3c5ad67408389da56353041fe52988c706e6f3d476bb55317a87f2d9f0b667baad2413f565389dabf7009799fcb0a8a7076e2d6adf3a2c79d3765b25312
-
SSDEEP
98304:UWCg3KRHO1V6FdyhuW9Q5brVD9/NiRPkVlHwhsPirGfdHo5QOEtAW:JCikuqdyb9IrV2mlHmGFGEt
Score
8/10
Malware Config
Signatures
-
Blocklisted process makes network request 10 IoCs
flow pid Process 2 340 rundll32.exe 3 340 rundll32.exe 6 340 rundll32.exe 7 340 rundll32.exe 8 340 rundll32.exe 9 340 rundll32.exe 10 340 rundll32.exe 11 340 rundll32.exe 12 340 rundll32.exe 13 340 rundll32.exe -
resource yara_rule behavioral1/memory/340-1-0x0000000071E60000-0x0000000072E90000-memory.dmp upx behavioral1/memory/340-6-0x0000000071E60000-0x0000000072E90000-memory.dmp upx behavioral1/memory/340-9-0x0000000071E60000-0x0000000072E90000-memory.dmp upx behavioral1/memory/340-12-0x0000000071E60000-0x0000000072E90000-memory.dmp upx behavioral1/memory/340-13-0x0000000071E60000-0x0000000072E90000-memory.dmp upx behavioral1/memory/340-15-0x0000000071E60000-0x0000000072E90000-memory.dmp upx behavioral1/memory/340-16-0x0000000071E60000-0x0000000072E90000-memory.dmp upx behavioral1/memory/340-18-0x0000000071E60000-0x0000000072E90000-memory.dmp upx behavioral1/memory/340-19-0x0000000071E60000-0x0000000072E90000-memory.dmp upx -
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 340 rundll32.exe 340 rundll32.exe