8b0e9f5b640d5b809997b62dfec98faf284181b1cef0ce94163986ca62de980a

Resubmissions

09-08-2024 23:40

09-08-2024 23:39

09-08-2024 23:33

max time kernel
37s
max time network
36s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
09-08-2024 23:39

Target

RNDIS.cat
Size

6KB
MD5

34f6daf6ad8fd6dc21895b84740b61ea
SHA1

5027b48dab39ce9f760c1e0fcf88b18ce288ab69
SHA256

1ad30df6aedf400e15b20a4021577e098f300e3d334fe8965e33007f684a685c
SHA512

bfc25a83dcaed893433ca72450d2e86f331712275f193c424a3769a40e2f46536f0a311c1a4f7b2bd04c15e41f192f557b495e325a41a88f5397cb2f35bc6944
SSDEEP

96:3qfy6EoMCDPDaZD74odMsDPDa7yQBD74KDUU9iyvPk5CbDPDadD7DfezZkHDPDaz:3qfy6EoM+hjeyveCkj3EpLHQQF8pIz

Score

8^/10

Blocklisted process makes network request 1 IoCs

Processes:

rundll32.exe

flow pid process

4 2356 rundll32.exe

flow	pid	process
4	2356	rundll32.exe

C:\Windows\system32\rundll32.exe
C:\Windows\system32\rundll32.exe cryptext.dll,CryptExtOpenCAT C:\Users\Admin\AppData\Local\Temp\RNDIS.cat
1⤵
- Blocklisted process makes network request
PID:2356

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=4444,i,6510295916244954942,10164894160290787457,262144 --variations-seed-version --mojo-platform-channel-handle=4404 /prefetch:8
1⤵
PID:3208