Resubmissions

20-09-2024 04:14

240920-etxbdaydlk 10

20-09-2024 04:08

240920-eqd1maxgld 10

Analysis

  • max time kernel
    90s
  • max time network
    99s
  • platform
    windows11-21h2_x64
  • resource
    win11-20240802-en
  • resource tags

    arch:x64arch:x86image:win11-20240802-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    20-09-2024 04:08

General

  • Target

    stealer/jre/bin/api-ms-win-crt-utility-l1-1-0.dll

  • Size

    11KB

  • MD5

    dbc27d384679916ba76316fb5e972ea6

  • SHA1

    fb9f021f2220c852f6ff4ea94e8577368f0616a4

  • SHA256

    dd14133adf5c534539298422f6c4b52739f80aca8c5a85ca8c966dea9964ceb1

  • SHA512

    cc0d8c56749ccb9d007b6d3f5c4a8f1d4e368bb81446ebcd7cc7b40399bbd56d0acaba588ca172ecb7472a8cbddbd4c366ffa38094a832f6d7e343b813ba565e

  • SSDEEP

    192:ZjfHQdufWthWCWf9BvVVWQ4mWMlUteSP+CjAWqnajKsN0c:ZfZWthW/Nd4P+CcWlGsN0c

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\stealer\jre\bin\api-ms-win-crt-utility-l1-1-0.dll,#1
    1⤵
      PID:4684

    Network

    • flag-us
      DNS
      29.243.111.52.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      29.243.111.52.in-addr.arpa
      IN PTR
      Response
    No results found
    • 8.8.8.8:53
      29.243.111.52.in-addr.arpa
      dns
      72 B
      158 B
      1
      1

      DNS Request

      29.243.111.52.in-addr.arpa

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    We care about your privacy.

    This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.