4991b71421f1ce2d5f6a5ceb97e6c938817672ecb5318691dcbc504d08f0c026

Analysis

max time kernel
92s
max time network
94s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
19/09/2024, 06:02

Target

4991b71421f1ce2d5f6a5ceb97e6c938817672ecb5318691dcbc504d08f0c026N.dll
Size

3.5MB
MD5

5882a9fdcec11ca7e1bfd51e63da7c40
SHA1

537b479e3a29fea277396ffff63bd96ed588999b
SHA256

4991b71421f1ce2d5f6a5ceb97e6c938817672ecb5318691dcbc504d08f0c026
SHA512

a410aa71f58300b63df8fc733f47b1aef47e443cb489f4af0e7c4eed52deb205f6046aeb6661258de9fc0522be613c721a3af3f28c1be43cd965385e5c740c9f
SSDEEP

49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zS:8QKotcTlBk9YwzEhPbYzjmMtccXk8KG

Score

1^/10

Suspicious behavior: EnumeratesProcesses 4 IoCs

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4991b71421f1ce2d5f6a5ceb97e6c938817672ecb5318691dcbc504d08f0c026N.dll,#1
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4404

memory/4404-0-0x00007FFB87E93000-0x00007FFB88092000-memory.dmp

Filesize
2.0MB

Download
memory/4404-2-0x00007FFB87E70000-0x00007FFB88418000-memory.dmp

Filesize
5.7MB

Download
memory/4404-1-0x00007FFBA5C10000-0x00007FFBA5C12000-memory.dmp

Filesize
8KB

Download
memory/4404-5-0x00007FFB87E70000-0x00007FFB88418000-memory.dmp

Filesize
5.7MB

Download