4639f92c3366088a2dd5ee04eebe46321c7cfc6b2cae12cf7d3b0d2130ca4c82

Analysis

max time kernel
122s
max time network
124s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
11/09/2024, 15:02

Target

4639f92c3366088a2dd5ee04eebe46321c7cfc6b2cae12cf7d3b0d2130ca4c82.dll
Size

3.5MB
MD5

a539f1089d92118ff5c1eaf40b021622
SHA1

d8d0f8817e1abab08d8b5291712233fccbe76666
SHA256

4639f92c3366088a2dd5ee04eebe46321c7cfc6b2cae12cf7d3b0d2130ca4c82
SHA512

547d26178f9f06c0fa795439b681718d751bace79cb3eb4fddb2eb040256fbc7fdb92fe9bdead5e4106acba021fcd15e206f2e31bf272363b9dc628efffa6d54
SSDEEP

49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+z6:8QKotcTlBk9YwzEhPbYzjmMtccXk8KG

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3048	rundll32.exe
3048	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4639f92c3366088a2dd5ee04eebe46321c7cfc6b2cae12cf7d3b0d2130ca4c82.dll,#1
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:3048

memory/3048-5-0x0000000077490000-0x0000000077492000-memory.dmp

Filesize
8KB

Download
memory/3048-3-0x0000000077490000-0x0000000077492000-memory.dmp

Filesize
8KB

Download
memory/3048-1-0x0000000077490000-0x0000000077492000-memory.dmp

Filesize
8KB

Download
memory/3048-0-0x000007FEF52E3000-0x000007FEF54E2000-memory.dmp

Filesize
2.0MB

Download
memory/3048-9-0x000007FEF52C0000-0x000007FEF5868000-memory.dmp

Filesize
5.7MB

Download