Analysis

  • max time kernel
    92s
  • max time network
    101s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    14/09/2024, 14:15

General

  • Target

    7e2bd92e49e3d263d2ae49adfef4d36a8dc124b881ce2c3a4b429f5972815fc1.dll

  • Size

    3.5MB

  • MD5

    8d0f1ea8de266e801c3a062d57d6acc4

  • SHA1

    ffbe234ae2e62d25d399dee0084fab8b0230efe5

  • SHA256

    7e2bd92e49e3d263d2ae49adfef4d36a8dc124b881ce2c3a4b429f5972815fc1

  • SHA512

    52d749f17386de9386ad477408ed517a1ad744ffe83b8a6a837946e95e70d2a6471afbfe1285cfb4203b184f1ea8df3ddc5726b03ae07ad77c0e24f7296deab8

  • SSDEEP

    49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+z/:8QKotcTlBk9YwzEhPbYzjmMtccXk8KD

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 4 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\7e2bd92e49e3d263d2ae49adfef4d36a8dc124b881ce2c3a4b429f5972815fc1.dll,#1
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:4132

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/4132-0-0x00007FF9E67B3000-0x00007FF9E69B2000-memory.dmp

          Filesize

          2.0MB

        • memory/4132-2-0x00007FF9E6790000-0x00007FF9E6D38000-memory.dmp

          Filesize

          5.7MB

        • memory/4132-1-0x00007FFA044D0000-0x00007FFA044D2000-memory.dmp

          Filesize

          8KB

        • memory/4132-5-0x00007FF9E6790000-0x00007FF9E6D38000-memory.dmp

          Filesize

          5.7MB