Analysis
-
max time kernel
93s -
max time network
95s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
29/09/2024, 22:50
General
-
Target
ez ping/EzPingFiles/Microsoft.Xaml.Behaviors.dll
-
Size
141KB
-
MD5
6b93b0f937d04d39172f9cd61fe58fd5
-
SHA1
54fb26f8b4f11d01573fd1c6a1b532af2b37d687
-
SHA256
ff75938fedee596706171916db763ac100bc7164a7346dd739ad61660e068b5a
-
SHA512
d3b7bbb09842984147b8dc849ef7467c3927cd8730ccfcc310d6d46bf3070e826d7a1cffc43a2ccc33d5d8521ea07d2c19d766b127fafc71edcf288db187df1d
-
SSDEEP
1536:CClZTaFPgnGNXRhJbyC35MilASMJmF0bapI2hJWq1dwpUgcacykfwtQsxspzSUMj:CCPmFPD950+dzR1decbMn5TX55r4j2
Score
3/10
Malware Config
Signatures
-
System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 1 IoCs
Adversaries may check for Internet connectivity on compromised systems.
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe "C:\Users\Admin\AppData\Local\Temp\ez ping\EzPingFiles\Microsoft.Xaml.Behaviors.dll",#11⤵
- System Network Configuration Discovery: Internet Connection Discovery