Analysis
-
max time kernel
93s -
max time network
95s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
02/09/2024, 11:03 UTC
Static task
static1
Behavioral task
behavioral1
Sample
955b37994dac9b6386e4697301440751dbe9c02b4c6219a949909be491b26844.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
955b37994dac9b6386e4697301440751dbe9c02b4c6219a949909be491b26844.dll
Resource
win10v2004-20240802-en
General
-
Target
955b37994dac9b6386e4697301440751dbe9c02b4c6219a949909be491b26844.dll
-
Size
2.5MB
-
MD5
c9140e0cd8e4d8522b709d9ef360867e
-
SHA1
0517aa1ec1c56050097e968d4b79a63ee8dc76d0
-
SHA256
955b37994dac9b6386e4697301440751dbe9c02b4c6219a949909be491b26844
-
SHA512
37b17f2b6623d13fcfa212b7e193a2f3a086e932725065b1ab2dd8b52201893a69136806e120b7bbfa99f8875838d0ed15fff8859aee872c406d5b6118c79078
-
SSDEEP
49152:z3lhQTnAh9WPPmQzl2HkAxE6wjqIBRHfKbNqOlM04DCOhM:5hQTnP2HkALwOIB1ibNqOlM04DCOe
Malware Config
Signatures
Processes
Network
-
Remote address:8.8.8.8:53Request240.221.184.93.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request154.239.44.20.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request95.221.229.192.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request68.32.126.40.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request26.165.165.52.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request15.164.165.52.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request21.236.111.52.in-addr.arpaIN PTRResponse
-
73 B 144 B 1 1
DNS Request
240.221.184.93.in-addr.arpa
-
72 B 158 B 1 1
DNS Request
154.239.44.20.in-addr.arpa
-
73 B 144 B 1 1
DNS Request
95.221.229.192.in-addr.arpa
-
71 B 157 B 1 1
DNS Request
68.32.126.40.in-addr.arpa
-
72 B 146 B 1 1
DNS Request
26.165.165.52.in-addr.arpa
-
72 B 146 B 1 1
DNS Request
15.164.165.52.in-addr.arpa
-
72 B 158 B 1 1
DNS Request
21.236.111.52.in-addr.arpa