Analysis

  • max time kernel
    121s
  • max time network
    137s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    10-08-2024 20:44

General

  • Target

    The.Sapling.v11.30/The.Sapling.v11.30/the_sapling_Data/Managed/Assembly-CSharp-firstpass.dll

  • Size

    770KB

  • MD5

    abbf536e6a09e6fd71c8848b56a0a1dc

  • SHA1

    8974eb6ef33e4378354c57aa5c2299f7ca91db88

  • SHA256

    de88542878137f2afba7fe7f29c9d42e3ca62070005fd420b5f101c16ee35f47

  • SHA512

    43cd58f6e4b30dc3afb428591495e53e40344aa3db470d090f9b573ad4e2b68d5d93ca6fd3305002e90e0189496b3098596db23d350d34d58d1cd8b0da06f868

  • SSDEEP

    24576:JfE7dYENYESaBmCGRSoqKcvYzRCnnxrBAyUowct:J9KEqUAn3eowc

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\The.Sapling.v11.30\The.Sapling.v11.30\the_sapling_Data\Managed\Assembly-CSharp-firstpass.dll,#1
    1⤵
      PID:3060

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads