Analysis
-
max time kernel
94s -
max time network
96s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
29/09/2024, 22:50
General
-
Target
ez ping/EzPingFiles/System.IO.Compression.FileSystem.dll
-
Size
33KB
-
MD5
5e332318ebf17c621351eea927c0649a
-
SHA1
58df276290ec61db725101448b2f10806335b03d
-
SHA256
9dcd6cb04f38abf56694533a07173159360791eac3cf22795ecf28b489964742
-
SHA512
ce6344dab3380cb7f2fe05d35caef7610f72c3d02233e085689f6d27cd9c95a18d3783daf08b71eaf336e9dabbc56808979b9b97aad084e5887964d66997b56f
-
SSDEEP
384:DnZ7y2Qea+TaHwtPFeoobtwJZ+zsPZuPWpoWPOKvQpBj0HRN7lDQHRN7ok9flxIp:d7y2da+h2ooKT6MPMKvqWh81C
Score
3/10
Malware Config
Signatures
-
System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 1 IoCs
Adversaries may check for Internet connectivity on compromised systems.
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe "C:\Users\Admin\AppData\Local\Temp\ez ping\EzPingFiles\System.IO.Compression.FileSystem.dll",#11⤵
- System Network Configuration Discovery: Internet Connection Discovery