1c8f1e5e6d6f87f6fbae754c4ec1615c5bb9ab951c296a44c8f9ec7d7bf919a4 | Triage

Resubmissions

21/08/2024, 09:49

240821-ltgz1s1hkb 5

21/08/2024, 09:47

240821-lsgymavgrl 5

Analysis

max time kernel
21s
max time network
17s
platform
windows7_x64
resource
win7-20240705-es
resource tags

arch:x64arch:x86image:win7-20240705-eslocale:es-esos:windows7-x64systemwindows
submitted
21/08/2024, 09:47

Sharing

Report Analysis Logs

General

Target

superiority_RUST.dll
Size

2.9MB
MD5

2fb15c42c3eecae12175779fbc724754
SHA1

7f6e7d45562745a3fc77ca77ab34190121410a87
SHA256

4f5331b8d5a9dd68a275c49f3d301c9d96bf3ef70ef407e052f0d4289ea61e08
SHA512

5b1bc84819a509e9ff1ebb7c7acc05ca1531cfeb6fc07b5562750ece8ce5e21414697ecc94a4a79c27bb9ef8a21c2dce7e613420c260d16c3a024602800773ee
SSDEEP

49152:Ot5GxVHP/weHZpxWjE8QdobkvL2NnQ5ERj9mlWeiYtnnouuiC:OzCWApmkvy9e

Score

5^/10

Malware Config

Signatures

Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs

pid	Process
2288	rundll32.exe

Suspicious behavior: EnumeratesProcesses 1 IoCs

pid	Process
2288	rundll32.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2288	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\superiority_RUST.dll,#1
1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
PID:2288

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads