Analysis
- max time kernel
145s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20241007-en - submitted
17/10/2024, 02:05
Behavioral task
behavioral1
Sample
a20d56ab2e53b3a599af9904f163bb2e1b2bb7f2c98432519e1fbe87c3867e66.dll
Resource
win7-20240903-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
a20d56ab2e53b3a599af9904f163bb2e1b2bb7f2c98432519e1fbe87c3867e66.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
1 signatures
150 seconds
General
- Target a20d56ab2e53b3a599af9904f163bb2e1b2bb7f2c98432519e1fbe87c3867e66.dll
- Size 2.1MB
- Sample241017-ch532azerl
- SHA256 a20d56ab2e53b3a599af9904f163bb2e1b2bb7f2c98432519e1fbe87c3867e66
- MD5 637e0ef5d12fd38122ea517dc57854f3
- SHA1 169c40bbfa251680af68dbac9dbbca5bfdd60d61
- SHA512 c82f9087dae66a87adf0dbca6834854bb21f15252cc6f571b595895d07f8ce368832bfd380df51c2f4fd07287a7ade0a81b5636a1e72e2ac18ed2dc66f51262d
- SSDEEP 49152:bGgJ3vE7rwsY5+a+h1cHkUnl/u9Zx/PgxeAaE+bK2i4rG:NavI5+qHxsgxeAenrG
- MD5 SHA1 SHA512 SSDEEP
Score
8/10
Malware Config
Signatures
- Blocklisted process makes network request 21 IoCs
flow pid Process 17 4084 rundll32.exe 27 4084 rundll32.exe 34 4084 rundll32.exe 37 4084 rundll32.exe 49 4084 rundll32.exe 54 4084 rundll32.exe 56 4084 rundll32.exe 58 4084 rundll32.exe 60 4084 rundll32.exe 69 4084 rundll32.exe 71 4084 rundll32.exe 73 4084 rundll32.exe 75 4084 rundll32.exe 79 4084 rundll32.exe 92 4084 rundll32.exe 94 4084 rundll32.exe 96 4084 rundll32.exe 98 4084 rundll32.exe 100 4084 rundll32.exe 103 4084 rundll32.exe 105 4084 rundll32.exe