Overview

overview

3

Static

static

3

0458afa28b...0N.dll

windows7-x64

1

0458afa28b...0N.dll

windows10-2004-x64

1

Analysis

  • max time kernel
    96s
  • max time network
    97s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    08/09/2024, 05:46

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    0458afa28baf8323201ca92566122590N.dll

  • Size

    3.5MB

  • MD5

    0458afa28baf8323201ca92566122590

  • SHA1

    717cc2fe82059150be04f354ab083fa1bbd61520

  • SHA256

    934176092b8eeb7365a0ab1a2c88a1cb288e9c552d0326894818f1f39656ad36

  • SHA512

    1b05e8fda6ce91737877fd9e1d1b81ccdc4b4d289a87fe558fceca2c169e8c739dd44488e0365b24c9247aa567f8dc9f4c3ad9ce60487694f7f40969c0c2301d

  • SSDEEP

    49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zl:8QKotcTlBk9YwzEhPbYzjmMtccXk8Kh

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 4 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\0458afa28baf8323201ca92566122590N.dll,#1
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:1664

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/1664-0-0x00007FF9FB1B3000-0x00007FF9FB3B2000-memory.dmp

          Filesize

          2.0MB

          Download

        • memory/1664-1-0x00007FFA18E10000-0x00007FFA18E12000-memory.dmp

          Filesize

          8KB

          Download

        • memory/1664-2-0x00007FF9FB190000-0x00007FF9FB738000-memory.dmp

          Filesize

          5.7MB

          Download

        • memory/1664-5-0x00007FF9FB190000-0x00007FF9FB738000-memory.dmp

          Filesize

          5.7MB

          Download