5aabbec356727ec233a191e911fe0ac32399a6a5870937e3ec760b0fb7486355

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
04-10-2024 08:33

Target

5aabbec356727ec233a191e911fe0ac32399a6a5870937e3ec760b0fb7486355.dll
Size

3.5MB
MD5

7f26f874ee302ab79aef04dd8074472f
SHA1

b2e06322be33d8b82d4625c87eec27e9ac130425
SHA256

5aabbec356727ec233a191e911fe0ac32399a6a5870937e3ec760b0fb7486355
SHA512

39de3f1f23cb81af79c2c66e6f8fb409ff8acb14b8d7475123928ba5f974508324454e2c49929e43e10d9efb9b558a3606fa6c59548ca86c7460a8798be21f2e
SSDEEP

49152:WwApIj2UwOmhJfOkNqZbPxrH4jP/A7+Lc37acfmWd/5gPzpuOEeMzj+TALICmwdd:Wrmj3EA6qNJ7F7yTWnRYEeMzj7BxMx6

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1092	rundll32.exe
1092	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\5aabbec356727ec233a191e911fe0ac32399a6a5870937e3ec760b0fb7486355.dll,#1
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:1092

memory/1092-0-0x000007FEF5A53000-0x000007FEF5C4F000-memory.dmp

Filesize
2.0MB

Download
memory/1092-1-0x00000000779E0000-0x00000000779E2000-memory.dmp

Filesize
8KB

Download
memory/1092-3-0x00000000779E0000-0x00000000779E2000-memory.dmp

Filesize
8KB

Download
memory/1092-5-0x00000000779E0000-0x00000000779E2000-memory.dmp

Filesize
8KB

Download
memory/1092-9-0x000007FEF5A30000-0x000007FEF5FCD000-memory.dmp

Filesize
5.6MB

Download
memory/1092-10-0x000007FEF5A30000-0x000007FEF5FCD000-memory.dmp

Filesize
5.6MB

Download