Analysis
-
max time kernel
20s -
max time network
6s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-fr -
resource tags
arch:x64arch:x86image:win10v2004-20240709-frlocale:fr-fros:windows10-2004-x64systemwindows -
submitted
13-07-2024 16:14
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
moon.dll
Resource
win10v2004-20240709-fr
windows10-2004-x64
0 signatures
1200 seconds
General
-
Target
moon.dll
-
Size
1.7MB
-
MD5
2d4991c3b6da35745e0d4f76dffbca56
-
SHA1
61340c41787d16b753598670de2cb1dcf50718c5
-
SHA256
3dacf5cd40090a6d011f1e522eaed2d29699b9d892ce122ea406e0c9d03d5d2d
-
SHA512
87eb0d4957d81c9ec3be2bf5f032428b4d8e298b8dd70c6a5fc9cd98ad2bb12beb457b32ab698452cb558fdd98e6a78fb081fdf22f63ad0238f0a8ff1092a17f
-
SSDEEP
6144:kmfAXkTibUcmTQo1GLvCJpazpEWwrbzM0KI6dh:kmmkTuUc9oALvOaFdQzM0KJh
Score
1/10
Malware Config
Signatures
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\moon.dll,#11⤵PID:4856
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:4732