5f9ab323ea63d90774804713dd2f85907ce99c0a8cbab40d52c3cb0dc431c201 | Triage

Analysis

max time kernel
117s
max time network
122s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
24-08-2024 16:38

Sharing

Report Analysis Logs

General

Target

2555superiority.dll
Size

2.9MB
MD5

88e03e21ef24b687e09ff9b99edb1ed8
SHA1

3157b62c5d2e23735fde4ed59748bd549b498e18
SHA256

856265d0d04d67dce09d0046806d41b11dd74ab5336d359ed6fbccb7bfd72e5c
SHA512

e12356886ff19e6cb01287f10f3e2154a6ba05ba566de02eb62d803c417c1b344abb37e05f0a3fc2b2f7602c49a4456abb6014f716b5018d1a863f61f5fdc460
SSDEEP

49152:EKXLDMhW01Um5dUUm80QbaqLxF9guV4nQ5ERj9mlWeiYtnERyuiCk:rXq2D4F9k9e/

Score

5^/10

Malware Config

Signatures

Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs

pid	Process
2848	rundll32.exe

Suspicious behavior: EnumeratesProcesses 1 IoCs

pid	Process
2848	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2555superiority.dll,#1
1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
PID:2848

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads