Analysis
-
max time kernel
122s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system -
submitted
14/08/2024, 11:02
Static task
static1
Behavioral task
behavioral1
Sample
exploit.zip
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
exploit.zip
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
main/main.exe
Resource
win7-20240729-en
Behavioral task
behavioral4
Sample
main/main.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
main/miscs/Bridge.dll
Resource
win7-20240705-en
Behavioral task
behavioral6
Sample
main/miscs/Bridge.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
main/miscs/bridge_connector.dll
Resource
win7-20240704-en
Behavioral task
behavioral8
Sample
main/miscs/bridge_connector.dll
Resource
win10v2004-20240802-en
General
-
Target
main/miscs/Bridge.dll
-
Size
15KB
-
MD5
06a778d6dff5d5b9e48e755589ec0375
-
SHA1
801a922f4b9883cb3ac82b89e8af64c411b3bf4d
-
SHA256
c240520ea38650a29d5dda3f2698b83bcbf9491cbc686c7b6c3be1d84ac6a2cf
-
SHA512
f9d314e9438416ae511481d4665cf9dffc96b8a93d49e6f952a76ec46181f89e4f862567079a9c4abdfb06ed9d2244e8ca361dc67b42072ac5b839d7c495937b
-
SSDEEP
192:ZqAkIOWvoKvF5/bc/VeEbvLwclcRqWLXjFJ:0Aow/gdeEbTwTqWLXjF
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 2692 rundll32.exe