Analysis
-
max time kernel
134s -
max time network
137s -
platform
windows10-1703_x64 -
resource
win10-20240404-en -
resource tags
-
submitted
08/10/2024, 15:36 UTC
General
-
Target
Plugins/Recovery.dll
-
Size
309KB
-
MD5
08131d6801c109f0764a4fe690aba8ef
-
SHA1
e732af02326483700eda52ff40dc70cff6b7afcb
-
SHA256
bc3a9390c043f8002e356ad34b2b11d3486682d0c275ab6729bb4a312e324f51
-
SHA512
228ab0aa0ddfdb0c099f1db5112304d776cb97ab2dab376d38023e446cb2aec30d9585eba444818f3241ffbc28565a1aef11f97b5b42bf57037de8e4a8536e2a
-
SSDEEP
6144:sb8xPy7+NKMDMAlcn38OxKl9x7qs9Pxcm0AUNy9rsxLaxHUX:sbBMDMVqfBdcmDBuX
Score
1/10
Malware Config
Signatures
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\Plugins\Recovery.dll,#11⤵
Network
-
DNS22.236.111.52.in-addr.arpaRemote address:8.8.8.8:53Request22.236.111.52.in-addr.arpaIN PTRResponse -
DNS83.210.23.2.in-addr.arpaRemote address:8.8.8.8:53Request83.210.23.2.in-addr.arpaIN PTRResponse83.210.23.2.in-addr.arpaIN PTRa2-23-210-83deploystaticakamaitechnologiescom
-
DNS67.112.168.52.in-addr.arpaRemote address:8.8.8.8:53Request67.112.168.52.in-addr.arpaIN PTRResponse
-
52.111.227.14:443
-
8.8.8.8:5322.236.111.52.in-addr.arpadns
DNS Request
22.236.111.52.in-addr.arpa
-
8.8.8.8:5383.210.23.2.in-addr.arpadns
DNS Request
83.210.23.2.in-addr.arpa
-
8.8.8.8:5367.112.168.52.in-addr.arpadns
DNS Request
67.112.168.52.in-addr.arpa