Analysis

  • max time kernel
    15s
  • max time network
    17s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    04-09-2024 01:57

General

  • Target

    ae1e41b3d2a3f37f36d433f73dd37290N.dll

  • Size

    3.5MB

  • MD5

    ae1e41b3d2a3f37f36d433f73dd37290

  • SHA1

    ac007bedc363ce62e1547f042cf34746dd3ca1d4

  • SHA256

    48c9e7f124da622ca46471f72a1550f2641a1123cc8beb8a805efbb9c8f81163

  • SHA512

    eff25e3783dd09fbdfe0275455690eaefd2a202807302f0460aaaf7ee415cff85e1f1b20534106e453bc42148b551c85545cd8e0bd232cce3f98958c8ec152ef

  • SSDEEP

    49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zI:8QKotcTlBk9YwzEhPbYzjmMtccXk8KM

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 2 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\ae1e41b3d2a3f37f36d433f73dd37290N.dll,#1
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:2280

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2280-0-0x000007FEF5733000-0x000007FEF5932000-memory.dmp

    Filesize

    2.0MB

  • memory/2280-3-0x00000000776C0000-0x00000000776C2000-memory.dmp

    Filesize

    8KB

  • memory/2280-1-0x00000000776C0000-0x00000000776C2000-memory.dmp

    Filesize

    8KB

  • memory/2280-5-0x00000000776C0000-0x00000000776C2000-memory.dmp

    Filesize

    8KB

  • memory/2280-9-0x000007FEF5710000-0x000007FEF5CB8000-memory.dmp

    Filesize

    5.7MB

  • memory/2280-10-0x000007FEF5710000-0x000007FEF5CB8000-memory.dmp

    Filesize

    5.7MB