Overview

overview

3

Static

static

3

fa2506769e...67.dll

windows7-x64

1

fa2506769e...67.dll

windows10-2004-x64

1

Analysis

  • max time kernel
    94s
  • max time network
    125s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    07/09/2024, 17:29

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    fa2506769e2998cbebe29c168451471f16df0c5f1c0511a0b4203ad95f36bd67.dll

  • Size

    3.5MB

  • MD5

    451dc856631aad5ee8aca4bd34c9ac3a

  • SHA1

    4d8c4eb00e7c0c4be9744d105fcd6f59b48140d7

  • SHA256

    fa2506769e2998cbebe29c168451471f16df0c5f1c0511a0b4203ad95f36bd67

  • SHA512

    0f967e9b633ce9bd7efab6ae2851b5f12f1d4aef39831b6600684dca05ae35d47b3cd62e47d25af3ab2968ef612c954a877fd6c1823b7c660bc3ef6dba0d8ea7

  • SSDEEP

    49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zC:8QKotcTlBk9YwzEhPbYzjmMtccXk8Ku

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 4 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\fa2506769e2998cbebe29c168451471f16df0c5f1c0511a0b4203ad95f36bd67.dll,#1
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:4032

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/4032-0-0x00007FF99E973000-0x00007FF99EB72000-memory.dmp

          Filesize

          2.0MB

          Download

        • memory/4032-2-0x00007FF99E950000-0x00007FF99EEF8000-memory.dmp

          Filesize

          5.7MB

          Download

        • memory/4032-5-0x00007FF99E950000-0x00007FF99EEF8000-memory.dmp

          Filesize

          5.7MB

          Download

        • memory/4032-1-0x00007FF9BC6B0000-0x00007FF9BC6B2000-memory.dmp

          Filesize

          8KB

          Download