Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    14/10/2024, 01:14

General

  • Target

    2fb59f7698a1ec5f801292ec4c63dcdf256b96d0a199eb7acd014dd8f7c6dad0.dll

  • Size

    5.3MB

  • MD5

    5a64f8b68c232aa482411d1638011b6b

  • SHA1

    5fb42bb34d255acef944d560606b7bc78b0b00fc

  • SHA256

    2fb59f7698a1ec5f801292ec4c63dcdf256b96d0a199eb7acd014dd8f7c6dad0

  • SHA512

    44654112555c3c8f7036547593953f07dad07bc4a11a0e8e26720a3a9fedbf4d4a83e418a64117ba405bd723f2e4a149063f03dd605e2835b3b94b348ebf3bd5

  • SSDEEP

    98304:4aHpWI0k8jKXTXvpDMoeaJCFR9sraDAuuY94onZJO1BS16NHG:aI38jM9ARKraDGY1nDOOqHG

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 2 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\2fb59f7698a1ec5f801292ec4c63dcdf256b96d0a199eb7acd014dd8f7c6dad0.dll,#1
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:2360

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/2360-6-0x000007FEF4614000-0x000007FEF496E000-memory.dmp

          Filesize

          3.4MB

        • memory/2360-4-0x0000000076F30000-0x0000000076F32000-memory.dmp

          Filesize

          8KB

        • memory/2360-9-0x000007FEF42F0000-0x000007FEF4EC0000-memory.dmp

          Filesize

          11.8MB

        • memory/2360-2-0x0000000076F30000-0x0000000076F32000-memory.dmp

          Filesize

          8KB

        • memory/2360-0-0x0000000076F30000-0x0000000076F32000-memory.dmp

          Filesize

          8KB

        • memory/2360-10-0x000007FEF42F0000-0x000007FEF4EC0000-memory.dmp

          Filesize

          11.8MB

        • memory/2360-11-0x0000000076DD1000-0x0000000076DD2000-memory.dmp

          Filesize

          4KB