8a57aa6477fb83df5b4cc1999aa5e98e8380632e38ccad28ffbc922bc6bdfedd

Analysis

max time kernel
131s
max time network
137s
platform
windows10-1703_x64
resource
win10-20240404-en
resource tags

arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system
submitted
06-09-2024 20:33

Target

BedrockLauncher/app/MimeMapping.dll
Size

241KB
MD5

2aa0993d4f001d51115461e164c9763b
SHA1

e892e9df3d2cca6aabece596a44c1ffd3393079b
SHA256

3ad1ad73e176643241580d6077dd67c99d83a8c4b21dbc9c4c03bb72c22a501f
SHA512

ccbf184d8773c4ca30eeb968e53fbb5670bc7a1a5ab049ebaa8f1ecb56403a70cf0985692107cd7c18c443eaa0fb17b56cfa61ab44b61172b69eeafc9116a892
SSDEEP

6144:/BYpJqT2vOD05USyyheZAS4Dxn7HbqMXZq:ypgamw5U2hec77

Score

3^/10

discovery

System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 1 IoCs
Adversaries may check for Internet connectivity on compromised systems.
discovery

Internet Connection Discovery
T1016.001

Processes:

rundll32.exe

pid process

376 rundll32.exe

pid	process
376	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\BedrockLauncher\app\MimeMapping.dll,#1
1⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:376

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact