42dbaff628530a3fe1df9fbdfa96d301667d49cd6db162271691800cd2ce6da6

Analysis

max time kernel
93s
max time network
120s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
23-09-2024 19:15

Target

net6.0-windows/runtimes/win/lib/net6.0/System.Management.dll
Size

304KB
MD5

a9d07609f161c1b90ab5ac4f4d11569e
SHA1

458b9a6ddf85a5f5c8a96de4eb416b5e737bf77e
SHA256

fff7c1e9f12a99c2c52a6c0ae81075be78dbef7dbc4f1162164990b4ccf6eadd
SHA512

811bbc018352e144afd2c8ba5d10a379ca058bbcea553431544ac747c654d5d21e3359aca024b26c192d3e6639682a601a173f1624a8e8052539a22caa884fa6
SSDEEP

3072:KgHBEFyIHS/PsfxJj7TgQq3XZbIkE1HhnDQ/NpydzhI0SFpkFUNygucwycrSB9v5:REHS/PsfzLZ0/DyDnQVVvcA

Score

3^/10

discovery

System Time Discovery 1 TTPs 1 IoCs
Adversary may gather the system time and/or time zone settings from a local or remote system.
discovery

System Time Discovery
T1124

Processes:

rundll32.exe

pid process

4580 rundll32.exe

pid	process
4580	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\net6.0-windows\runtimes\win\lib\net6.0\System.Management.dll,#1
1⤵
- System Time Discovery
PID:4580

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Time Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact