Analysis
-
max time kernel
119s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
-
submitted
18-09-2024 07:14
General
-
Target
jli.dll
-
Size
3.7MB
-
MD5
ab00251a16e0b607232483e4548f4b5b
-
SHA1
59e921397449cdf81789159dc2567e7dd0864d1d
-
SHA256
594d7beb2dafb0ad54e415d09fe2421eb7fa0554685d99171fbd10dc646f4e58
-
SHA512
fd77e1a779efe5467bb9390488d4d22396c2a6c3b5b63de1ab9fc64907f0507996fba320956df1eebaefe04f482c9ee64d429b188d5baf308dbd117c3fbf0bbf
-
SSDEEP
49152:MJPwtJEdvqUcEoHd2CkhA45YQzpx9gF0l9XtVYNR5PlDyr:MOtdUo8YQpYBlD
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\jli.dll,#11⤵
- Suspicious use of AdjustPrivilegeToken