Analysis
-
max time kernel
2s -
platform
windows11-21h2_x64 -
resource
win11-20240802-en -
resource tags
-
submitted
19-09-2024 07:04
General
-
Target
Nezur.dll
-
Size
15.2MB
-
MD5
071ac773d4677d0ee3ac4a23ac0d2e95
-
SHA1
da9abf13aee659307ce71be04fe12b92b88e5006
-
SHA256
82cd8b37e938b10f891aad91445a336f942428eeafe153d0b4348a9e9677af65
-
SHA512
5412eb895b433860c1347751cd157962fd0b21b289af116db4e4a8a27bb3380f5c60a976cc70c87259786820c8424d3dd0b31c94add65970dbf42f948e7ca513
-
SSDEEP
393216:b7Ybk/86uwIkGui7TNhUF0s8j+M3bRDWg6Vh00WDSXnI:nYwk6aui7JhUFyjTbRDWgeyDWI
Score
7/10
Malware Config
Signatures
-
Themida packer 2 IoCs
Detects Themida, an advanced Windows software protection system.
-
Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\Nezur.dll,#11⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8.8MB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
25.6MB
-
Filesize
8.8MB
-
Filesize
25.6MB