Analysis

  • max time kernel
    89s
  • max time network
    101s
  • platform
    windows11-21h2_x64
  • resource
    win11-20240802-en
  • resource tags

    arch:x64arch:x86image:win11-20240802-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    09/09/2024, 16:27

General

  • Target

    publish/bin/libcairo-2.dll

  • Size

    991KB

  • MD5

    011adbf1bcf6ecf533b429ab3a06cb4f

  • SHA1

    cc3acdcec4103e3e9bb85c1814c17704b95862db

  • SHA256

    751c93bc9e36ee73f30d24c13729afa1e8ceb6527706b2bd23df363dd5830304

  • SHA512

    5fa08f6b4f276fadd1a0c3b95186a46ed57ddc9d1fc4f819fa4e3845d26c58b322943f8beabd11f118b6612a202857427499ac6469b491f2dd53541a0c117db2

  • SSDEEP

    24576:90614pb4CZNZuZ5uCkFnWXPiJ0iEmsCn3UxMTfzLz:90M4pUCTZubuIXe0iEmsCnNTfzLz

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\publish\bin\libcairo-2.dll,#1
    1⤵
      PID:5020

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • memory/5020-14-0x00000000649C0000-0x0000000064AE5000-memory.dmp

            Filesize

            1.1MB

          • memory/5020-13-0x0000000070540000-0x000000007056D000-memory.dmp

            Filesize

            180KB

          • memory/5020-12-0x0000000061600000-0x0000000061712000-memory.dmp

            Filesize

            1.1MB

          • memory/5020-10-0x00000000626C0000-0x00000000626DA000-memory.dmp

            Filesize

            104KB

          • memory/5020-9-0x0000000061CC0000-0x0000000061CE8000-memory.dmp

            Filesize

            160KB

          • memory/5020-8-0x0000000068F40000-0x0000000068F86000-memory.dmp

            Filesize

            280KB

          • memory/5020-16-0x000000006FC40000-0x000000006FDA5000-memory.dmp

            Filesize

            1.4MB

          • memory/5020-7-0x00000000693C0000-0x0000000069473000-memory.dmp

            Filesize

            716KB

          • memory/5020-5-0x0000000064940000-0x0000000064955000-memory.dmp

            Filesize

            84KB

          • memory/5020-3-0x0000000062E80000-0x0000000062E9F000-memory.dmp

            Filesize

            124KB

          • memory/5020-2-0x0000000064F80000-0x0000000064FCE000-memory.dmp

            Filesize

            312KB

          • memory/5020-0-0x0000000068DC0000-0x0000000068EBE000-memory.dmp

            Filesize

            1016KB

          • memory/5020-15-0x0000000069140000-0x000000006918E000-memory.dmp

            Filesize

            312KB

          • memory/5020-11-0x0000000066000000-0x000000006610B000-memory.dmp

            Filesize

            1.0MB

          • memory/5020-6-0x0000000063500000-0x00000000635AC000-memory.dmp

            Filesize

            688KB

          • memory/5020-4-0x0000000068B40000-0x0000000068B80000-memory.dmp

            Filesize

            256KB

          • memory/5020-1-0x0000000061440000-0x000000006145C000-memory.dmp

            Filesize

            112KB