94995b2d7b4973d6b4f03c6bd9b7b48380b695342b38ad2ca6556df6daa5edec | Triage

Analysis

max time kernel
133s
max time network
137s
platform
windows10-1703_x64
resource
win10-20240404-en
resource tags

arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system
submitted
07/09/2024, 16:20 UTC

Sharing

Report Analysis Logs

General

Target

A Final Draft Bill of Lading/MpCommu.dll
Size

332KB
MD5

5fb1ac615c3c72df4dec02a64b7fd379
SHA1

f1491c11f9b793f758fdcd613a5e28b725f2d06a
SHA256

ca77dd6e870173ab419d43e56fb4446c6cf4493707287864049ce8b5e951ddec
SHA512

c227c1f91dd8105e7bb6b52365199251438a3f85df20d513c2956455b607d3e10fd5e7d5c8cd7cc01a4bb24cf6a240c28e5ef0c8ae6fc0f42970a1c9efe82973
SSDEEP

6144:AOpiJ7wnqa2EwPCaIAjB+9e20RG1yMuYLg4Ly:CJc2geH2r1xuey

Score

1^/10

Malware Config

Signatures

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\A Final Draft Bill of Lading\MpCommu.dll",#1
1⤵
PID:1716

Network

DNS

43.229.111.52.in-addr.arpa

Remote address:

8.8.8.8:53

Request

43.229.111.52.in-addr.arpa

IN PTR

Response
DNS

93.65.42.20.in-addr.arpa

Remote address:

8.8.8.8:53

Request

93.65.42.20.in-addr.arpa

IN PTR

Response

No results found

8.8.8.8:53

43.229.111.52.in-addr.arpa

dns

72 B
158 B
1
1

DNS Request

43.229.111.52.in-addr.arpa
8.8.8.8:53

93.65.42.20.in-addr.arpa

dns

70 B
156 B
1
1

DNS Request

93.65.42.20.in-addr.arpa

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads