4a4dc942e9795bff56ac71549fbd42c6ad071fa3e026efaaa2736c4780c43814

Analysis

max time kernel
120s
max time network
122s
platform
windows7_x64
resource
win7-20240729-en
resource tags

arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
submitted
02-10-2024 02:08

Target

4a4dc942e9795bff56ac71549fbd42c6ad071fa3e026efaaa2736c4780c43814.dll
Size

3.5MB
MD5

664a2e0dacdece5949ce3b069c3d9c79
SHA1

d26a28ed6bba0a494418f9171ac2358caee2c3e1
SHA256

4a4dc942e9795bff56ac71549fbd42c6ad071fa3e026efaaa2736c4780c43814
SHA512

a8956b467acc3ea70f9d08730c3dda8e83a7c8357c603ba17bc356b4b0cc7cfdfad94e084a6b2a4cb75a770843b991dc1a808eef9ba3adad560ad5d50af593b1
SSDEEP

49152:WwApIj2UwOmhJfOkNqZbPxrH4jP/A7+Lc37acfmWd/5gPzpuOEeMzj+TALICmwdJ:Wrmj3EA6qNJ7F7yTWnRYEeMzj7BxMx6

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2088	rundll32.exe
2088	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4a4dc942e9795bff56ac71549fbd42c6ad071fa3e026efaaa2736c4780c43814.dll,#1
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:2088

memory/2088-3-0x0000000077520000-0x0000000077522000-memory.dmp

Filesize
8KB

Download
memory/2088-1-0x0000000077520000-0x0000000077522000-memory.dmp

Filesize
8KB

Download
memory/2088-0-0x000007FEF5AD3000-0x000007FEF5CCF000-memory.dmp

Filesize
2.0MB

Download
memory/2088-6-0x000007FEF5AB0000-0x000007FEF604D000-memory.dmp

Filesize
5.6MB

Download
memory/2088-5-0x0000000077520000-0x0000000077522000-memory.dmp

Filesize
8KB

Download