Analysis
-
max time kernel
148s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
submitted
16-10-2024 11:01
Behavioral task
behavioral1
Sample
a20d56ab2e53b3a599af9904f163bb2e1b2bb7f2c98432519e1fbe87c3867e66.dll
Resource
win7-20240903-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
a20d56ab2e53b3a599af9904f163bb2e1b2bb7f2c98432519e1fbe87c3867e66.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
a20d56ab2e53b3a599af9904f163bb2e1b2bb7f2c98432519e1fbe87c3867e66.dll
-
Size
2.1MB
-
MD5
637e0ef5d12fd38122ea517dc57854f3
-
SHA1
169c40bbfa251680af68dbac9dbbca5bfdd60d61
-
SHA256
a20d56ab2e53b3a599af9904f163bb2e1b2bb7f2c98432519e1fbe87c3867e66
-
SHA512
c82f9087dae66a87adf0dbca6834854bb21f15252cc6f571b595895d07f8ce368832bfd380df51c2f4fd07287a7ade0a81b5636a1e72e2ac18ed2dc66f51262d
-
SSDEEP
49152:bGgJ3vE7rwsY5+a+h1cHkUnl/u9Zx/PgxeAaE+bK2i4rG:NavI5+qHxsgxeAenrG
Score
8/10
Malware Config
Signatures
-
Blocklisted process makes network request 21 IoCs
flow pid Process 17 4820 rundll32.exe 25 4820 rundll32.exe 36 4820 rundll32.exe 38 4820 rundll32.exe 52 4820 rundll32.exe 55 4820 rundll32.exe 57 4820 rundll32.exe 59 4820 rundll32.exe 61 4820 rundll32.exe 71 4820 rundll32.exe 73 4820 rundll32.exe 78 4820 rundll32.exe 80 4820 rundll32.exe 93 4820 rundll32.exe 95 4820 rundll32.exe 97 4820 rundll32.exe 99 4820 rundll32.exe 101 4820 rundll32.exe 103 4820 rundll32.exe 106 4820 rundll32.exe 108 4820 rundll32.exe