8b0e9f5b640d5b809997b62dfec98faf284181b1cef0ce94163986ca62de980a

Resubmissions

09-08-2024 23:40

09-08-2024 23:39

09-08-2024 23:33

max time kernel
31s
max time network
32s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
09-08-2024 23:33

Target

RNDIS.cat
Size

6KB
MD5

34f6daf6ad8fd6dc21895b84740b61ea
SHA1

5027b48dab39ce9f760c1e0fcf88b18ce288ab69
SHA256

1ad30df6aedf400e15b20a4021577e098f300e3d334fe8965e33007f684a685c
SHA512

bfc25a83dcaed893433ca72450d2e86f331712275f193c424a3769a40e2f46536f0a311c1a4f7b2bd04c15e41f192f557b495e325a41a88f5397cb2f35bc6944
SSDEEP

96:3qfy6EoMCDPDaZD74odMsDPDa7yQBD74KDUU9iyvPk5CbDPDadD7DfezZkHDPDaz:3qfy6EoM+hjeyveCkj3EpLHQQF8pIz

Score

8^/10

Blocklisted process makes network request 1 IoCs

Processes:

rundll32.exe

flow pid process

3 2188 rundll32.exe

flow	pid	process
3	2188	rundll32.exe

C:\Windows\system32\rundll32.exe
C:\Windows\system32\rundll32.exe cryptext.dll,CryptExtOpenCAT C:\Users\Admin\AppData\Local\Temp\RNDIS.cat
1⤵
- Blocklisted process makes network request
PID:2188