Analysis

  • max time kernel
    119s
  • max time network
    160s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11/09/2024, 22:07

General

  • Target

    libfreetype-6.dll

  • Size

    731KB

  • MD5

    1275fcb092b72ee949ca811de490c560

  • SHA1

    e235a4fc9def8c5c5fcc4abb0e84630032b85c82

  • SHA256

    4d7064d4ae83a7e4cd229a2420c3bff77e7829860666df415ecb647f3d70b84f

  • SHA512

    c030f0e855544aaed6fd01444be53b991683e8854668482391e4e7247600a68cae476e9c7d189f5bede374b6464143a0710c58c1d82581c1e34fe6528bcf44e8

  • SSDEEP

    12288:dIN+JrhmNHy+MUt7HDwFw894yXN93xwNeuaC8XWAOIprFfEWmc9Jthmw:dINYrN+7low8tXNPRXC8XW10qZEJthmw

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\libfreetype-6.dll,#1
    1⤵
      PID:4560

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/4560-7-0x00007FF9DAF20000-0x00007FF9DAF42000-memory.dmp

      Filesize

      136KB

    • memory/4560-6-0x00007FF9DC9D0000-0x00007FF9DC9F4000-memory.dmp

      Filesize

      144KB

    • memory/4560-14-0x00007FF9CD040000-0x00007FF9CD159000-memory.dmp

      Filesize

      1.1MB

    • memory/4560-9-0x00007FF9CD360000-0x00007FF9CD553000-memory.dmp

      Filesize

      1.9MB

    • memory/4560-12-0x00007FF9DDBD0000-0x00007FF9DDBE6000-memory.dmp

      Filesize

      88KB

    • memory/4560-11-0x00007FF9CD1D0000-0x00007FF9CD1F8000-memory.dmp

      Filesize

      160KB

    • memory/4560-10-0x00007FF9D9230000-0x00007FF9D925D000-memory.dmp

      Filesize

      180KB

    • memory/4560-8-0x00007FF9CD200000-0x00007FF9CD356000-memory.dmp

      Filesize

      1.3MB

    • memory/4560-5-0x00007FF9DD9C0000-0x00007FF9DD9EC000-memory.dmp

      Filesize

      176KB

    • memory/4560-13-0x00007FF9CD160000-0x00007FF9CD1C7000-memory.dmp

      Filesize

      412KB

    • memory/4560-3-0x00007FF9CD560000-0x00007FF9CD675000-memory.dmp

      Filesize

      1.1MB

    • memory/4560-2-0x00007FF9DDD70000-0x00007FF9DDD86000-memory.dmp

      Filesize

      88KB

    • memory/4560-0-0x00007FF9CD680000-0x00007FF9CD73E000-memory.dmp

      Filesize

      760KB

    • memory/4560-4-0x00007FF9D4870000-0x00007FF9D48B3000-memory.dmp

      Filesize

      268KB

    • memory/4560-1-0x00007FF9DE130000-0x00007FF9DE14F000-memory.dmp

      Filesize

      124KB