Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    02/10/2024, 07:02

General

  • Target

    72e84d0fd36d8c3cc2d0450fc8f95462b3b8089e228d3b62aa2abb04d4886aef.dll

  • Size

    3.5MB

  • MD5

    53fa3f0d76095f7b1283867254ab4b31

  • SHA1

    b5a537633c8db6f6f57187be8a6cda2d4b7cbb08

  • SHA256

    72e84d0fd36d8c3cc2d0450fc8f95462b3b8089e228d3b62aa2abb04d4886aef

  • SHA512

    71cb811750bc5406286cabd0f305a6d0403ef8846db98fea96dae42d24a6924b259a8e8142a6a88027edc56e8dedd4f2bb442f8ec715e9bd3932366019ad2468

  • SSDEEP

    49152:WwApIj2UwOmhJfOkNqZbPxrH4jP/A7+Lc37acfmWd/5gPzpuOEeMzj+TALICmwdz:Wrmj3EA6qNJ7F7yTWnRYEeMzj7BxMx4

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 2 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\72e84d0fd36d8c3cc2d0450fc8f95462b3b8089e228d3b62aa2abb04d4886aef.dll,#1
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:2888

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2888-9-0x000007FEF62A0000-0x000007FEF683D000-memory.dmp

    Filesize

    5.6MB

  • memory/2888-5-0x0000000077A70000-0x0000000077A72000-memory.dmp

    Filesize

    8KB

  • memory/2888-10-0x000007FEF62A0000-0x000007FEF683D000-memory.dmp

    Filesize

    5.6MB

  • memory/2888-3-0x0000000077A70000-0x0000000077A72000-memory.dmp

    Filesize

    8KB

  • memory/2888-1-0x0000000077A70000-0x0000000077A72000-memory.dmp

    Filesize

    8KB

  • memory/2888-0-0x000007FEF62C3000-0x000007FEF64BF000-memory.dmp

    Filesize

    2.0MB

  • memory/2888-11-0x000007FEF62A0000-0x000007FEF683D000-memory.dmp

    Filesize

    5.6MB