Analysis
-
max time kernel
597s -
max time network
600s -
platform
windows11-21h2_x64 -
resource
win11-20240802-en -
resource tags
arch:x64arch:x86image:win11-20240802-enlocale:en-usos:windows11-21h2-x64system -
submitted
05-10-2024 12:59
Behavioral task
behavioral1
Sample
LdrAddx64.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
1 signatures
600 seconds
Behavioral task
behavioral2
Sample
LdrAddx64.dll
Resource
win11-20240802-en
windows11-21h2-x64
1 signatures
600 seconds
General
-
Target
LdrAddx64.dll
-
Size
2.1MB
-
MD5
90010f98335ee9e5a46dd1f2f54ab6ef
-
SHA1
5886146225bef728847566c3af5b169a277b4338
-
SHA256
4c2af6abed05ca2b5164ee2c3a999da829b65701fd879dffbc6b73f09209f187
-
SHA512
3da2fad887882e6a6c0a12e79f42b59b3a580412fb9a6dc4c38819e89c5873caef136bb44593ab4b2ceb7e2653d96dbc70a16df965389d41feed79fde76a7852
-
SSDEEP
49152:gGgJ3vE7rwsY5+a+h1cHkUnl/u9Zx/PgxeAaEAbK2V0rG:mavI5+qHxsgxeAgsrG
Score
8/10
Malware Config
Signatures
-
Blocklisted process makes network request 48 IoCs
flow pid Process 2 1580 rundll32.exe 3 1580 rundll32.exe 4 1580 rundll32.exe 5 1580 rundll32.exe 6 1580 rundll32.exe 7 1580 rundll32.exe 8 1580 rundll32.exe 10 1580 rundll32.exe 12 1580 rundll32.exe 13 1580 rundll32.exe 14 1580 rundll32.exe 15 1580 rundll32.exe 16 1580 rundll32.exe 17 1580 rundll32.exe 18 1580 rundll32.exe 19 1580 rundll32.exe 20 1580 rundll32.exe 21 1580 rundll32.exe 22 1580 rundll32.exe 23 1580 rundll32.exe 24 1580 rundll32.exe 25 1580 rundll32.exe 26 1580 rundll32.exe 27 1580 rundll32.exe 28 1580 rundll32.exe 29 1580 rundll32.exe 32 1580 rundll32.exe 34 1580 rundll32.exe 37 1580 rundll32.exe 38 1580 rundll32.exe 39 1580 rundll32.exe 42 1580 rundll32.exe 43 1580 rundll32.exe 44 1580 rundll32.exe 45 1580 rundll32.exe 46 1580 rundll32.exe 48 1580 rundll32.exe 49 1580 rundll32.exe 50 1580 rundll32.exe 51 1580 rundll32.exe 52 1580 rundll32.exe 53 1580 rundll32.exe 54 1580 rundll32.exe 55 1580 rundll32.exe 56 1580 rundll32.exe 57 1580 rundll32.exe 58 1580 rundll32.exe 59 1580 rundll32.exe