48e4cc0b79d5794d1160e57f35f7ab4d0001a45a75d33e742425f739a13de84c

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
11-09-2024 13:52

Target

48e4cc0b79d5794d1160e57f35f7ab4d0001a45a75d33e742425f739a13de84c.dll
Size

3.5MB
MD5

33f941abefb650d145a1ec1aea740326
SHA1

87a350d2072111413c287e327a228f06f2e225f7
SHA256

48e4cc0b79d5794d1160e57f35f7ab4d0001a45a75d33e742425f739a13de84c
SHA512

82453b1d4ff8718814fcb85429988a4f315b8a2e1e1eb08dd77b59c600d3eafad2b33aa9e5ace6131b802be0d57ae263bde2fbbbd8a337d951a3612afb286286
SSDEEP

49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zh:8QKotcTlBk9YwzEhPbYzjmMtccXk8K9

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3012	rundll32.exe
3012	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\48e4cc0b79d5794d1160e57f35f7ab4d0001a45a75d33e742425f739a13de84c.dll,#1
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:3012

memory/3012-0-0x000007FEF5A33000-0x000007FEF5C32000-memory.dmp

Filesize
2.0MB

Download
memory/3012-3-0x00000000779E0000-0x00000000779E2000-memory.dmp

Filesize
8KB

Download
memory/3012-1-0x00000000779E0000-0x00000000779E2000-memory.dmp

Filesize
8KB

Download
memory/3012-5-0x00000000779E0000-0x00000000779E2000-memory.dmp

Filesize
8KB

Download
memory/3012-6-0x000007FEF5A10000-0x000007FEF5FB8000-memory.dmp

Filesize
5.7MB

Download