Resubmissions
19-09-2024 07:29
240919-jbcapsxeqk 719-09-2024 07:27
240919-jaa19axcje 719-09-2024 07:21
240919-h66x5axanb 719-09-2024 07:04
240919-hwcxaswenh 719-09-2024 07:04
240919-hv496awend 319-09-2024 07:00
240919-hs4kvawfqr 3Analysis
-
max time kernel
120s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
19-09-2024 07:00
General
-
Target
internationalPaymentDetails/jli.dll
-
Size
3.3MB
-
MD5
e183e315399e95064a29ed71d1dad374
-
SHA1
a1ccec3ca697bdd54faa8224b91c529bd24428a0
-
SHA256
2a11f2efc2b73b145409846a2956f620e76cbc8bd2d3ec023ca9dfa1e63b3ad2
-
SHA512
ec79c813c1ba3f49e8a91abe5aa51a28e1b179e73078d5abc14206a7e9830b969c0f6f6ca010c72d608bc34144f7e8f1be5a36910560ef8058fa23cab225baaa
-
SSDEEP
24576:SfYqf20BVQM6lg6A2haX95G8kN4sMsmySxpu0BeaWmnG9lHuFmX7GWAX+j4PBG8B:4u0/6lg6S9RkqshSCMiHuFmX7EX0Q
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\internationalPaymentDetails\jli.dll,#11⤵
- Suspicious use of AdjustPrivilegeToken