af7c65c2a2875e013d98f7e461a4f8fc9c149d581439c298b6944dbfdcc6601e

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
02/10/2024, 06:56

Target

af7c65c2a2875e013d98f7e461a4f8fc9c149d581439c298b6944dbfdcc6601e.dll
Size

3.5MB
MD5

65b0521a4f99534cb90f7482b80583ee
SHA1

f890f4082e0dac2021bea3cd915b7e6b511b62a9
SHA256

af7c65c2a2875e013d98f7e461a4f8fc9c149d581439c298b6944dbfdcc6601e
SHA512

fddca088c9929576b458c5918e24b79f69cb5e17751b6601b32b9cc8072358e683c87f19f9ccdfe7ea366b720ef6a37a4c8bc92fe15dfea6c31e704cc0573afc
SSDEEP

49152:WwApIj2UwOmhJfOkNqZbPxrH4jP/A7+Lc37acfmWd/5gPzpuOEeMzj+TALICmwdw:Wrmj3EA6qNJ7F7yTWnRYEeMzj7BxMx3

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2692	rundll32.exe
2692	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\af7c65c2a2875e013d98f7e461a4f8fc9c149d581439c298b6944dbfdcc6601e.dll,#1
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:2692

memory/2692-0-0x000007FEF5153000-0x000007FEF534F000-memory.dmp

Filesize
2.0MB

Download
memory/2692-1-0x00000000770C0000-0x00000000770C2000-memory.dmp

Filesize
8KB

Download
memory/2692-3-0x00000000770C0000-0x00000000770C2000-memory.dmp

Filesize
8KB

Download
memory/2692-5-0x00000000770C0000-0x00000000770C2000-memory.dmp

Filesize
8KB

Download
memory/2692-9-0x000007FEF5130000-0x000007FEF56CD000-memory.dmp

Filesize
5.6MB

Download
memory/2692-10-0x000007FEF5130000-0x000007FEF56CD000-memory.dmp

Filesize
5.6MB

Download