Overview

overview

3

Static

static

3

defea531ed...ef.dll

windows7-x64

1

defea531ed...ef.dll

windows10-2004-x64

1

Analysis

  • max time kernel
    93s
  • max time network
    123s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    12/09/2024, 20:33

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    defea531ede9550bb9aa0e3dd626e60e96b6f2cf4fda4ff62afd8f5b1e176aef.dll

  • Size

    3.5MB

  • MD5

    1b530b2f84978bea3ea9d6383267662d

  • SHA1

    83246f42dbaf64edfdb3b5e6e12bb9401f179532

  • SHA256

    defea531ede9550bb9aa0e3dd626e60e96b6f2cf4fda4ff62afd8f5b1e176aef

  • SHA512

    54d7a07a6bc54a7af67e0d362a589eb8507a5d99b5f192d1d040ae39b23babf754cf9595f05d7fce319b32c908eed0f2102c700e8e655052716e74987d61f2ec

  • SSDEEP

    49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zv:8QKotcTlBk9YwzEhPbYzjmMtccXk8Kr

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 4 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\defea531ede9550bb9aa0e3dd626e60e96b6f2cf4fda4ff62afd8f5b1e176aef.dll,#1
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:4748

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4748-2-0x00007FFF5BB70000-0x00007FFF5C118000-memory.dmp

    Filesize

    5.7MB

    Download

  • memory/4748-1-0x00007FFF798D0000-0x00007FFF798D2000-memory.dmp

    Filesize

    8KB

    Download

  • memory/4748-0-0x00007FFF5BB93000-0x00007FFF5BD92000-memory.dmp

    Filesize

    2.0MB

    Download