Analysis

  • max time kernel
    122s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    03-10-2024 07:11

General

  • Target

    7f81807395058d9f7f29cae4b4998a0be52520b07d2c0762fcb032bf92c008c9.dll

  • Size

    3.5MB

  • MD5

    7dde0282a685a60ed1b62f3279d71fae

  • SHA1

    46b1e5c7ec4078bf71ba929ba595697b68f14147

  • SHA256

    7f81807395058d9f7f29cae4b4998a0be52520b07d2c0762fcb032bf92c008c9

  • SHA512

    ebcab50e15de51c5aadff828387377f19669e9e2ea5dc80ba073f2df93f06a70cfd23374e1b120bed200d904379d039d31da7289a10dda369b8e75dcf43a1622

  • SSDEEP

    49152:WwApIj2UwOmhJfOkNqZbPxrH4jP/A7+Lc37acfmWd/5gPzpuOEeMzj+TALICmwd3:Wrmj3EA6qNJ7F7yTWnRYEeMzj7BxMxU

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 2 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\7f81807395058d9f7f29cae4b4998a0be52520b07d2c0762fcb032bf92c008c9.dll,#1
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:3064

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3064-0-0x000007FEF53B3000-0x000007FEF55AF000-memory.dmp

    Filesize

    2.0MB

  • memory/3064-3-0x00000000771E0000-0x00000000771E2000-memory.dmp

    Filesize

    8KB

  • memory/3064-5-0x00000000771E0000-0x00000000771E2000-memory.dmp

    Filesize

    8KB

  • memory/3064-1-0x00000000771E0000-0x00000000771E2000-memory.dmp

    Filesize

    8KB

  • memory/3064-10-0x000007FEF5390000-0x000007FEF592D000-memory.dmp

    Filesize

    5.6MB

  • memory/3064-9-0x000007FEF5390000-0x000007FEF592D000-memory.dmp

    Filesize

    5.6MB