Analysis

  • max time kernel
    92s
  • max time network
    158s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    10-09-2024 14:59

General

  • Target

    SDK/Assemblies/Microsoft.SqlServer.TransactSql.ScriptDom.dll

  • Size

    2.3MB

  • MD5

    515a692785f4f9a59ed8174cf2f7b3e8

  • SHA1

    b9708d762b24aaca22fd79461d8ee8752ebb97aa

  • SHA256

    4efdc459492b8a3ede761cb733f7d69a0dc94215f94812542741110f40abd094

  • SHA512

    81c680cbb93d50d30f659b9793460c14af5bbad74a72facebadfcb8beb6fb8639604c9c5352b9a1a323970fd0549c5982edca3eae0c62fc925914b3482d9ae75

  • SSDEEP

    49152:Aws5oX+QgFYoCqK6/sA2xVo7FCs/Z5ErGD5N:AzZ5E8

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\SDK\Assemblies\Microsoft.SqlServer.TransactSql.ScriptDom.dll,#1
    1⤵
      PID:2060

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads