Analysis
-
max time kernel
144s -
max time network
150s -
platform
windows7_x64 -
resource
win7-20240903-en -
submitted
16-10-2024 11:01
Behavioral task
behavioral1
Sample
a20d56ab2e53b3a599af9904f163bb2e1b2bb7f2c98432519e1fbe87c3867e66.dll
Resource
win7-20240903-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
a20d56ab2e53b3a599af9904f163bb2e1b2bb7f2c98432519e1fbe87c3867e66.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
a20d56ab2e53b3a599af9904f163bb2e1b2bb7f2c98432519e1fbe87c3867e66.dll
-
Size
2.1MB
-
MD5
637e0ef5d12fd38122ea517dc57854f3
-
SHA1
169c40bbfa251680af68dbac9dbbca5bfdd60d61
-
SHA256
a20d56ab2e53b3a599af9904f163bb2e1b2bb7f2c98432519e1fbe87c3867e66
-
SHA512
c82f9087dae66a87adf0dbca6834854bb21f15252cc6f571b595895d07f8ce368832bfd380df51c2f4fd07287a7ade0a81b5636a1e72e2ac18ed2dc66f51262d
-
SSDEEP
49152:bGgJ3vE7rwsY5+a+h1cHkUnl/u9Zx/PgxeAaE+bK2i4rG:NavI5+qHxsgxeAenrG
Score
8/10
Malware Config
Signatures
-
Blocklisted process makes network request 13 IoCs
flow pid Process 7 2796 rundll32.exe 9 2796 rundll32.exe 11 2796 rundll32.exe 13 2796 rundll32.exe 15 2796 rundll32.exe 18 2796 rundll32.exe 22 2796 rundll32.exe 26 2796 rundll32.exe 30 2796 rundll32.exe 34 2796 rundll32.exe 38 2796 rundll32.exe 43 2796 rundll32.exe 47 2796 rundll32.exe