a2ef56dedc817a40f6e3ba663f28a993d8d5b939e2b050e5e7b012ca9303dc25

Analysis

max time kernel
94s
max time network
96s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
12-09-2024 20:19

Target

a2ef56dedc817a40f6e3ba663f28a993d8d5b939e2b050e5e7b012ca9303dc25.dll
Size

3.5MB
MD5

277a2ebc14b09cc13c1e58befe39a8f2
SHA1

169936f2a437e73adbcc36a7e3133e68cb01f8cb
SHA256

a2ef56dedc817a40f6e3ba663f28a993d8d5b939e2b050e5e7b012ca9303dc25
SHA512

1f55c3c3d4e675751a9ec21fe76f39a6935913fb34402c8c7d25ef5e89c7acace9aa1cad8787cef2574b14b66ab0431347c90e7af2d6958f6b9b4a3600d1e73a
SSDEEP

49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zr:8QKotcTlBk9YwzEhPbYzjmMtccXk8KP

Score

1^/10

Suspicious behavior: EnumeratesProcesses 4 IoCs

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\a2ef56dedc817a40f6e3ba663f28a993d8d5b939e2b050e5e7b012ca9303dc25.dll,#1
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:2656

memory/2656-0-0x00007FFBD1433000-0x00007FFBD1632000-memory.dmp

Filesize
2.0MB

Download
memory/2656-2-0x00007FFBD1410000-0x00007FFBD19B8000-memory.dmp

Filesize
5.7MB

Download
memory/2656-1-0x00007FFBEF170000-0x00007FFBEF172000-memory.dmp

Filesize
8KB

Download
memory/2656-5-0x00007FFBD1410000-0x00007FFBD19B8000-memory.dmp

Filesize
5.7MB

Download