277d627693d55426e65aa09e3d9e517cfc4d5ccd82b0d21a25d690cc175ef28f

Analysis

max time kernel
8s
max time network
11s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
01/10/2024, 10:01

Target

latest.dll
Size

34.2MB
MD5

b5d72e1f64c50e466f0275102237325b
SHA1

c50a1d01860fee715d4f5c18086d6a3d7e315fd0
SHA256

7a8bf4f7318b60cf0bae89411c6d186a2da8ef79fa9aae0f0c5cdd0a4e5e7da5
SHA512

325fbf9b19acebd60b6b089b46317198a1d777b5440d225903aa27342162a8b06fe18d3d43686156da7f401427a182e37accc9c1b4ccf170f5aec9ae2391f982
SSDEEP

786432:sOWZ45zXI/1ajT2BLPvO0dpj4MYKh6cU3DT1L8/aTY:HWZ4tXI/1llm03JhFKDT1EO

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1100	rundll32.exe
1100	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\latest.dll,#1
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:1100

memory/1100-0-0x00007FFE6EDB0000-0x00007FFE6EDB2000-memory.dmp

Filesize
8KB

Download
memory/1100-2-0x00007FFE4DADB000-0x00007FFE4F237000-memory.dmp

Filesize
23.4MB

Download
memory/1100-1-0x00007FFE4C2B0000-0x00007FFE5146F000-memory.dmp

Filesize
81.7MB

Download
memory/1100-6-0x00007FFE4C2B0000-0x00007FFE5146F000-memory.dmp

Filesize
81.7MB

Download
memory/1100-7-0x00007FFE4DADB000-0x00007FFE4F237000-memory.dmp

Filesize
23.4MB

Download