Analysis
-
max time kernel
63s -
max time network
17s -
platform
windows7_x64 -
resource
win7-20240729-en -
resource tags
arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system -
submitted
05/08/2024, 15:35
Static task
static1
Behavioral task
behavioral1
Sample
v2.1.2/Sentinal.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
v2.1.2/Sentinal.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
v2.1.2/silence.exe
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
v2.1.2/silence.exe
Resource
win10v2004-20240802-en
General
-
Target
v2.1.2/Sentinal.dll
-
Size
3.7MB
-
MD5
bbbac23132e9369f028cf997e348a3e7
-
SHA1
303e54f6c391881937211096e1cd3b49d4d620a4
-
SHA256
b50a2702ee0df86859c127f9407a17523244beb68a8cc023b0f1aa1889f3adec
-
SHA512
0d1e2f4c14e077e86eb90804dd3c01ada6930357648fffe070e0bd0790ee15d222280bb59377e033d9073a50034f899868a79a3edd6070e61f3de70bb40dc363
-
SSDEEP
98304:dk2UQ6qbj8UPMGyj3h07y3EkXNfSEKSyroZ1bJOHF/EZ8UbHl:a2UA8l0k8NSyMLJOHFEZ8UbHl
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
pid Process 1172 rundll32.exe -
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 1172 rundll32.exe