Resubmissions

09-08-2024 23:40

240809-3n8n8avflm 8

09-08-2024 23:39

240809-3nhg2avfjk 8

09-08-2024 23:33

240809-3j53jaygld 8

Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    09-08-2024 23:40

General

  • Target

    RNDIS.cat

  • Size

    6KB

  • MD5

    34f6daf6ad8fd6dc21895b84740b61ea

  • SHA1

    5027b48dab39ce9f760c1e0fcf88b18ce288ab69

  • SHA256

    1ad30df6aedf400e15b20a4021577e098f300e3d334fe8965e33007f684a685c

  • SHA512

    bfc25a83dcaed893433ca72450d2e86f331712275f193c424a3769a40e2f46536f0a311c1a4f7b2bd04c15e41f192f557b495e325a41a88f5397cb2f35bc6944

  • SSDEEP

    96:3qfy6EoMCDPDaZD74odMsDPDa7yQBD74KDUU9iyvPk5CbDPDadD7DfezZkHDPDaz:3qfy6EoM+hjeyveCkj3EpLHQQF8pIz

Score
8/10

Malware Config

Signatures

  • Blocklisted process makes network request 1 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    C:\Windows\system32\rundll32.exe cryptext.dll,CryptExtOpenCAT C:\Users\Admin\AppData\Local\Temp\RNDIS.cat
    1⤵
    • Blocklisted process makes network request
    PID:2976

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads