Analysis

  • max time kernel
    149s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02/10/2024, 03:18

General

  • Target

    23943a4d9a466b588f8e5b0e6126506df839c9e948352f29541714672546c0f3.dll

  • Size

    3.5MB

  • MD5

    1d8bb6973d2e846ac17bbeaa88899e68

  • SHA1

    56a518fac521d728e7f06c5f5518deecef4ba272

  • SHA256

    23943a4d9a466b588f8e5b0e6126506df839c9e948352f29541714672546c0f3

  • SHA512

    dc95c471ae8f1dfe16554c494d59893602c6a35338b0a83ee472f6e192be5e030164327cfd2419526728bfeb08f422880b0fa7d8e409962152a9d6b3448d4eea

  • SSDEEP

    49152:WwApIj2UwOmhJfOkNqZbPxrH4jP/A7+Lc37acfmWd/5gPzpuOEeMzj+TALICmwdo:Wrmj3EA6qNJ7F7yTWnRYEeMzj7BxMxP

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 4 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\23943a4d9a466b588f8e5b0e6126506df839c9e948352f29541714672546c0f3.dll,#1
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:5104

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/5104-0-0x00007FFD0F8C3000-0x00007FFD0FABF000-memory.dmp

    Filesize

    2.0MB

  • memory/5104-2-0x00007FFD0F8A0000-0x00007FFD0FE3D000-memory.dmp

    Filesize

    5.6MB

  • memory/5104-1-0x00007FFD1E8F0000-0x00007FFD1E8F2000-memory.dmp

    Filesize

    8KB

  • memory/5104-5-0x00007FFD0F8A0000-0x00007FFD0FE3D000-memory.dmp

    Filesize

    5.6MB

  • memory/5104-6-0x00007FFD0F8A0000-0x00007FFD0FE3D000-memory.dmp

    Filesize

    5.6MB