Analysis

  • max time kernel
    93s
  • max time network
    122s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    04-10-2024 08:33

General

  • Target

    fbf550317539f0afb9856deff0228d985aa79bfa62e25b87c785c6e9f62eaac3.dll

  • Size

    3.5MB

  • MD5

    7abd30101d319db3b3b08efa36c2fe7c

  • SHA1

    a5ecc9792b708e5b1e9b14cf487758adbc3284ef

  • SHA256

    fbf550317539f0afb9856deff0228d985aa79bfa62e25b87c785c6e9f62eaac3

  • SHA512

    971b14e441fb62848ca0a5ce31bd902464e79125fd59f21787ab0a19d4a71d5deddc65dde253f1b93d757655950889863f1111275b0b82e5ca577d4b9f2360cb

  • SSDEEP

    49152:WwApIj2UwOmhJfOkNqZbPxrH4jP/A7+Lc37acfmWd/5gPzpuOEeMzj+TALICmwd4:Wrmj3EA6qNJ7F7yTWnRYEeMzj7BxMx7

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 4 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\fbf550317539f0afb9856deff0228d985aa79bfa62e25b87c785c6e9f62eaac3.dll,#1
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:732

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/732-0-0x00007FF9F5093000-0x00007FF9F528F000-memory.dmp

    Filesize

    2.0MB

  • memory/732-2-0x00007FF9F5070000-0x00007FF9F560D000-memory.dmp

    Filesize

    5.6MB

  • memory/732-1-0x00007FFA044D0000-0x00007FFA044D2000-memory.dmp

    Filesize

    8KB

  • memory/732-5-0x00007FF9F5070000-0x00007FF9F560D000-memory.dmp

    Filesize

    5.6MB