67d96bb126154f768c5bf68e0b47e06d018a615acd3909fc89d6a86d48f3c196

Analysis

max time kernel
97s
max time network
127s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
04/10/2024, 08:14

Target

67d96bb126154f768c5bf68e0b47e06d018a615acd3909fc89d6a86d48f3c196.dll
Size

3.5MB
MD5

3466a609631e2f0b3b4085b25e4485b4
SHA1

c21c8486cb2bad9195bbcd86852970b54b701929
SHA256

67d96bb126154f768c5bf68e0b47e06d018a615acd3909fc89d6a86d48f3c196
SHA512

56c7cb179c91709df704fa75ea42706ea6fbd0e352db6bdc25fd378dbf89fd71872bd3602bd4f13348be407946c0348b0c19ffe60bd678688b29b8017529eb9c
SSDEEP

49152:WwApIj2UwOmhJfOkNqZbPxrH4jP/A7+Lc37acfmWd/5gPzpuOEeMzj+TALICmwdM:Wrmj3EA6qNJ7F7yTWnRYEeMzj7BxMxr

Score

1^/10

Suspicious behavior: EnumeratesProcesses 4 IoCs

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\67d96bb126154f768c5bf68e0b47e06d018a615acd3909fc89d6a86d48f3c196.dll,#1
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:3552

memory/3552-0-0x00007FFE82A83000-0x00007FFE82C7F000-memory.dmp

Filesize
2.0MB

Download
memory/3552-2-0x00007FFE82A60000-0x00007FFE82FFD000-memory.dmp

Filesize
5.6MB

Download
memory/3552-1-0x00007FFE91B90000-0x00007FFE91B92000-memory.dmp

Filesize
8KB

Download
memory/3552-5-0x00007FFE82A60000-0x00007FFE82FFD000-memory.dmp

Filesize
5.6MB

Download
memory/3552-6-0x00007FFE82A60000-0x00007FFE82FFD000-memory.dmp

Filesize
5.6MB

Download