ff970805a167f26da0fb6fb92335a985105f253670118e11c9955811c5c309e9

Analysis

max time kernel
125s
max time network
126s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
05/10/2024, 07:05

Target

ff970805a167f26da0fb6fb92335a985105f253670118e11c9955811c5c309e9.dll
Size

3.5MB
MD5

5c40413da91752de4404df6bc8f19ae4
SHA1

79bd0c69f28679ffd9e247ec07c2d801c9b7b59a
SHA256

ff970805a167f26da0fb6fb92335a985105f253670118e11c9955811c5c309e9
SHA512

687b6b7af0d6fb950870f111309baa338345eef1bfd3c8a207d166eed259b55632827f5433c05b151a163b938b948852b479b5e4ae0c2d0a367b38917218a367
SSDEEP

49152:WwApIj2UwOmhJfOkNqZbPxrH4jP/A7+Lc37acfmWd/5gPzpuOEeMzj+TALICmwdj:Wrmj3EA6qNJ7F7yTWnRYEeMzj7BxMxw

Score

1^/10

Suspicious behavior: EnumeratesProcesses 4 IoCs

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\ff970805a167f26da0fb6fb92335a985105f253670118e11c9955811c5c309e9.dll,#1
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:1016

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=3796,i,3239535018877284530,3457823197501312703,262144 --variations-seed-version --mojo-platform-channel-handle=4368 /prefetch:8
1⤵
PID:3628

memory/1016-0-0x00007FF8897B3000-0x00007FF8899AF000-memory.dmp

Filesize
2.0MB

Download
memory/1016-1-0x00007FF8A7A50000-0x00007FF8A7A52000-memory.dmp

Filesize
8KB

Download
memory/1016-5-0x00007FF889790000-0x00007FF889D2D000-memory.dmp

Filesize
5.6MB

Download
memory/1016-6-0x00007FF889790000-0x00007FF889D2D000-memory.dmp

Filesize
5.6MB

Download