b44749a7da8e0dc03f7c4fe0e0f108723647c082e8eb8260690241793a185e55

Analysis

max time kernel
15s
max time network
17s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
08/09/2024, 03:43

Target

ab78221e9e61b36f95f382703a31a5e0N.dll
Size

3.5MB
MD5

ab78221e9e61b36f95f382703a31a5e0
SHA1

2787a5b2f1e2fa08f92f33d7cc379fd00d37fd84
SHA256

b44749a7da8e0dc03f7c4fe0e0f108723647c082e8eb8260690241793a185e55
SHA512

f3f6fcb7c98ddb8a90f3ec5873031c6e3890837989b1e8948feee8cf99a3829ee31308bae556f6ddc27716ae2caf9671f3822710e0ab352179be1aa20397ba72
SSDEEP

49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zI:8QKotcTlBk9YwzEhPbYzjmMtccXk8Kc

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2364	rundll32.exe
2364	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\ab78221e9e61b36f95f382703a31a5e0N.dll,#1
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:2364

memory/2364-0-0x000007FEF5823000-0x000007FEF5A22000-memory.dmp

Filesize
2.0MB

Download
memory/2364-3-0x00000000777B0000-0x00000000777B2000-memory.dmp

Filesize
8KB

Download
memory/2364-1-0x00000000777B0000-0x00000000777B2000-memory.dmp

Filesize
8KB

Download
memory/2364-5-0x00000000777B0000-0x00000000777B2000-memory.dmp

Filesize
8KB

Download
memory/2364-9-0x000007FEF5800000-0x000007FEF5DA8000-memory.dmp

Filesize
5.7MB

Download
memory/2364-10-0x000007FEF5800000-0x000007FEF5DA8000-memory.dmp

Filesize
5.7MB

Download