fe3ba5d4fa4a0bc52359cdaf94d1a6b38a66ac8e0ee3ebeb50e39e72dd4dae24

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
03/09/2024, 17:00

Target

fe3ba5d4fa4a0bc52359cdaf94d1a6b38a66ac8e0ee3ebeb50e39e72dd4dae24.dll
Size

3.5MB
MD5

258d5f95a5d9a287602737e90773c180
SHA1

ba8215a4b23f19f1aaf66f256d6a1d910b2453da
SHA256

fe3ba5d4fa4a0bc52359cdaf94d1a6b38a66ac8e0ee3ebeb50e39e72dd4dae24
SHA512

20363d0cb5b02502b80c115d98c273406dbd4a8e48efcdc6962d9e409c109d4dcd3498c810c89221cfc841b51cdce293a2d0ce59006f446748691d355be3fcc9
SSDEEP

49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+z9:8QKotcTlBk9YwzEhPbYzjmMtccXk8Kh

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1748	rundll32.exe
1748	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\fe3ba5d4fa4a0bc52359cdaf94d1a6b38a66ac8e0ee3ebeb50e39e72dd4dae24.dll,#1
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:1748

memory/1748-0-0x000007FEF54F3000-0x000007FEF56F2000-memory.dmp

Filesize
2.0MB

Download
memory/1748-3-0x00000000776D0000-0x00000000776D2000-memory.dmp

Filesize
8KB

Download
memory/1748-5-0x00000000776D0000-0x00000000776D2000-memory.dmp

Filesize
8KB

Download
memory/1748-1-0x00000000776D0000-0x00000000776D2000-memory.dmp

Filesize
8KB

Download
memory/1748-10-0x000007FEF54D0000-0x000007FEF5A78000-memory.dmp

Filesize
5.7MB

Download
memory/1748-9-0x000007FEF54D0000-0x000007FEF5A78000-memory.dmp

Filesize
5.7MB

Download