Analysis
-
max time kernel
145s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
submitted
17-10-2024 02:05
Behavioral task
behavioral1
Sample
a20d56ab2e53b3a599af9904f163bb2e1b2bb7f2c98432519e1fbe87c3867e66.dll
Resource
win7-20240903-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
a20d56ab2e53b3a599af9904f163bb2e1b2bb7f2c98432519e1fbe87c3867e66.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
a20d56ab2e53b3a599af9904f163bb2e1b2bb7f2c98432519e1fbe87c3867e66.dll
-
Size
2.1MB
-
MD5
637e0ef5d12fd38122ea517dc57854f3
-
SHA1
169c40bbfa251680af68dbac9dbbca5bfdd60d61
-
SHA256
a20d56ab2e53b3a599af9904f163bb2e1b2bb7f2c98432519e1fbe87c3867e66
-
SHA512
c82f9087dae66a87adf0dbca6834854bb21f15252cc6f571b595895d07f8ce368832bfd380df51c2f4fd07287a7ade0a81b5636a1e72e2ac18ed2dc66f51262d
-
SSDEEP
49152:bGgJ3vE7rwsY5+a+h1cHkUnl/u9Zx/PgxeAaE+bK2i4rG:NavI5+qHxsgxeAenrG
Score
8/10
Malware Config
Signatures
-
Blocklisted process makes network request 21 IoCs
flow pid Process 17 4084 rundll32.exe 27 4084 rundll32.exe 34 4084 rundll32.exe 37 4084 rundll32.exe 49 4084 rundll32.exe 54 4084 rundll32.exe 56 4084 rundll32.exe 58 4084 rundll32.exe 60 4084 rundll32.exe 69 4084 rundll32.exe 71 4084 rundll32.exe 73 4084 rundll32.exe 75 4084 rundll32.exe 79 4084 rundll32.exe 92 4084 rundll32.exe 94 4084 rundll32.exe 96 4084 rundll32.exe 98 4084 rundll32.exe 100 4084 rundll32.exe 103 4084 rundll32.exe 105 4084 rundll32.exe