Analysis
-
max time kernel
135s -
max time network
137s -
platform
windows10-1703_x64 -
resource
win10-20240404-en -
resource tags
-
submitted
18-08-2024 16:50
General
-
Target
PYG64.dll
-
Size
1.3MB
-
MD5
7c113281e232ee4e81217048737520ba
-
SHA1
f63d701fd81bbc9a03a8b43855aa6b5e694ab869
-
SHA256
65da2ac4ef85238bf977e948b1f14a85f8d2dd35d00e93c6f2cf5e8f4cf1d5f3
-
SHA512
d193d81f876ab662a6bcb24d442148e6826449a029e09271336c9a7730de5c22f195f431ebd13eb173574c4c0eefafdf6893a5bf245cdc07f127b16c77a254c2
-
SSDEEP
24576:PyXrbprozekA3dJG7xjOeGtqYVYkXTY6TTdTatPo0QT0PiQjV6:PGVoyJ3C7xjTGtqYVYkXPlTaW9T036
Score
5/10
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\PYG64.dll,#11⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4.3MB
-
Filesize
4.3MB
-
Filesize
64KB
-
Filesize
4KB
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
64KB
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
2.3MB
-
Filesize
1.9MB
-
Filesize
2.3MB
-
Filesize
1.9MB