Analysis
-
max time kernel
93s -
max time network
144s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
29-09-2024 22:50
General
-
Target
ez ping/EzPingFiles/Microsoft.Expression.Interactions.dll
-
Size
89KB
-
MD5
6a3b9e46c41e42e7b8e1479468d892af
-
SHA1
e31c05ae685e51d07808b1dd24ceced9d299ed81
-
SHA256
f3b14defbd05493b8573016b08b86e5b5d53b486b0457fd75f67bf8bff04be38
-
SHA512
d6416204875ce732edac51e36f267c9cca52f60ba79cd981b388988e435bd1cce87f972a9e90be4fd9a7fd25cb316293f938f45fb645f25a4f62b980a37236b7
-
SSDEEP
1536:Srf5GttgxHXEuRmG5rtkGY4CEmWAxXSSYhhS98ca2Wvsd65FJDlGWwkEy:a5GttWHXEUx5r65LxXshk8JDIWP
Score
3/10
Malware Config
Signatures
-
System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 1 IoCs
Adversaries may check for Internet connectivity on compromised systems.
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe "C:\Users\Admin\AppData\Local\Temp\ez ping\EzPingFiles\Microsoft.Expression.Interactions.dll",#11⤵
- System Network Configuration Discovery: Internet Connection Discovery