Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    19-10-2024 01:40

General

  • Target

    DLL Payloads/DLL-Sideload-Message-Box.dll

  • Size

    57KB

  • MD5

    ae5284e2d2d5967cb39fcfe98616a855

  • SHA1

    f6a9ad24f452f510a29372a99b752b7ad8d3f6bc

  • SHA256

    e69ffee97b25e57ba9b747e7b092cae185fb7faa6a2c0c75ff7ac5d9da179b8f

  • SHA512

    adb6314eb32c4e564cff46c94eddbf5233ed041d363533d0fbd06692e68bd94473ad68a72e6103f9baa68a29ccc5e1a8e586ecf58bf0ddc169355bd7a0ea70ec

  • SSDEEP

    384:/0TznG3eLET4lAbpfREIPL/GU/ikHoJrdg49/MGQfBXbuABEu7flY2lUn9u8O+:/hKqbL7fort9/M/Brum17fS2lUhO+

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe "C:\Users\Admin\AppData\Local\Temp\DLL Payloads\DLL-Sideload-Message-Box.dll",#1
    1⤵
      PID:1668

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1668-1-0x000007FEF72E0000-0x000007FEF7305000-memory.dmp

      Filesize

      148KB

    • memory/1668-2-0x000007FEF7310000-0x000007FEF7335000-memory.dmp

      Filesize

      148KB

    • memory/1668-0-0x000007FEF7310000-0x000007FEF7335000-memory.dmp

      Filesize

      148KB