Analysis
-
max time kernel
143s -
max time network
111s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
01/09/2024, 00:20
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
56aee52f4940412abcd9a15efb5e9c1df00cc3fe505482d62b9ed78f471eb3aa.dll
Resource
win7-20240708-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
56aee52f4940412abcd9a15efb5e9c1df00cc3fe505482d62b9ed78f471eb3aa.dll
Resource
win10v2004-20240802-en
2 signatures
150 seconds
General
-
Target
56aee52f4940412abcd9a15efb5e9c1df00cc3fe505482d62b9ed78f471eb3aa.dll
-
Size
360KB
-
MD5
726752194a382cd9d540b4976d524947
-
SHA1
9b6a2be0a893705c4cc8b8eb40036686d46e9bb1
-
SHA256
56aee52f4940412abcd9a15efb5e9c1df00cc3fe505482d62b9ed78f471eb3aa
-
SHA512
385793ac0d0157c8ee7d1592f911aa836ee754fb5997b97d8427a5e451334e4689452f0ba964ebc011475bec6b3d36590e31d273983e9a1b710952920e837fee
-
SSDEEP
6144:9mRdC6xhlEgUBgi1Ew8jvilWd6A5A5hMj:9mRdCiFagiQjgdAshMj
Score
5/10
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
pid Process 1108 rundll32.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1108 rundll32.exe