Analysis

  • max time kernel
    89s
  • max time network
    159s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11/09/2024, 22:07

General

  • Target

    libharfbuzz-0.dll

  • Size

    1.1MB

  • MD5

    df49aaea47df8753d17614cb8983d8d4

  • SHA1

    5bfc79701532ab72f42da5a68d7f70457658d3ed

  • SHA256

    65ef3b141848d1b3b1f7b5e93f6cf9d0ff69bcd5631ebcd54b010605e8dda18d

  • SHA512

    723b2b327b106b6f92f3e43c04a0ff28ca9eb64fdd5bbba281b087fc420f9b89dbdf22f66501b036b1ab68f89b4eb22c3dcf4827bcf84d23d5d6c8478bc6e72d

  • SSDEEP

    24576:2tWpTEZz57ftVfDPb4+XTV02AXOxmWF2Xn:zEZz5LvDjtXTV02qQF2Xn

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\libharfbuzz-0.dll,#1
    1⤵
      PID:1128

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1128-3-0x00007FF999270000-0x00007FF99932E000-memory.dmp

      Filesize

      760KB

    • memory/1128-2-0x00007FF98A970000-0x00007FF98AB63000-memory.dmp

      Filesize

      1.9MB

    • memory/1128-12-0x00007FF999560000-0x00007FF9995C7000-memory.dmp

      Filesize

      412KB

    • memory/1128-1-0x00007FF99D470000-0x00007FF99D492000-memory.dmp

      Filesize

      136KB

    • memory/1128-0-0x00007FF9990F0000-0x00007FF999205000-memory.dmp

      Filesize

      1.1MB

    • memory/1128-13-0x00007FF999530000-0x00007FF99955C000-memory.dmp

      Filesize

      176KB

    • memory/1128-11-0x00007FF98A6F0000-0x00007FF98A809000-memory.dmp

      Filesize

      1.1MB

    • memory/1128-10-0x00007FF99D450000-0x00007FF99D46F000-memory.dmp

      Filesize

      124KB

    • memory/1128-9-0x00007FF999A10000-0x00007FF999A53000-memory.dmp

      Filesize

      268KB

    • memory/1128-8-0x00007FF99DFD0000-0x00007FF99DFE6000-memory.dmp

      Filesize

      88KB

    • memory/1128-7-0x00007FF99FA40000-0x00007FF99FA56000-memory.dmp

      Filesize

      88KB

    • memory/1128-6-0x00007FF99A0D0000-0x00007FF99A0F8000-memory.dmp

      Filesize

      160KB

    • memory/1128-5-0x00007FF99D3E0000-0x00007FF99D40D000-memory.dmp

      Filesize

      180KB

    • memory/1128-4-0x00007FF98A810000-0x00007FF98A966000-memory.dmp

      Filesize

      1.3MB

    • memory/1128-14-0x00007FF9A2690000-0x00007FF9A26B4000-memory.dmp

      Filesize

      144KB