Analysis
-
max time kernel
149s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
02-10-2024 12:10
Static task
static1
Behavioral task
behavioral1
Sample
f12d8a7d60d99ea12a244a350d0f17aa0f25b661067d884d6bc33d1ba2d0613c.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f12d8a7d60d99ea12a244a350d0f17aa0f25b661067d884d6bc33d1ba2d0613c.dll
Resource
win10v2004-20240802-en
General
-
Target
f12d8a7d60d99ea12a244a350d0f17aa0f25b661067d884d6bc33d1ba2d0613c.dll
-
Size
3.5MB
-
MD5
173b5a52a905f5aa38636caa2d26d42a
-
SHA1
ab88080fb39e8ebd4b2e41b66f57ec2f06ffc78d
-
SHA256
f12d8a7d60d99ea12a244a350d0f17aa0f25b661067d884d6bc33d1ba2d0613c
-
SHA512
7a4c66eb7c410eb7015a9077ce75ac3e9f32bce3fed694c1e026459dd8bd2a246d093f64d45d8f01f80bf47277f9510e9223750ca661ecf501c6dc9196b39e50
-
SSDEEP
98304:DZjREIse0Pezc9RRqe2jg0+/nsSjOWa4XKvyfQocs:1pDoezYSehP1C5jKfQg
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
pid Process 5012 rundll32.exe 5012 rundll32.exe 5012 rundll32.exe 5012 rundll32.exe