Analysis
-
max time kernel
93s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
29-09-2024 22:50
General
-
Target
ez ping/EzPingFiles/Microsoft.Diagnostics.Tracing.TraceEvent.dll
-
Size
2.9MB
-
MD5
6c530ce9c11c3ec95a2ea25c53fe844a
-
SHA1
9d6b194bc1bfab2f0176f65110b13f4c39d4fab5
-
SHA256
011bed2efa854fe5ba2a36190de5a65f3bd6008603508a1b950f078ed96bbc71
-
SHA512
5692235c4a5acfcb99c2923f3ff67929a88cde1df275a145e377fbdbcb1f74e6aaa5cf0866b500c5a59554ced2723d9a33e8097c918fcda82140c752c8f067b3
-
SSDEEP
24576:eq4mZp30/hUhpfW8Xt+beEyb70fSU+asFx9yPKbrftpUW:Fvo2pW8uvSU+as/9y+
Score
3/10
Malware Config
Signatures
-
System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 1 IoCs
Adversaries may check for Internet connectivity on compromised systems.
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe "C:\Users\Admin\AppData\Local\Temp\ez ping\EzPingFiles\Microsoft.Diagnostics.Tracing.TraceEvent.dll",#11⤵
- System Network Configuration Discovery: Internet Connection Discovery