Analysis
-
max time kernel
427s -
max time network
1155s -
platform
windows11-21h2_x64 -
resource
win11-20241007-en -
resource tags
-
submitted
15/11/2024, 15:51 UTC
General
-
Target
lib/Mono.Nat.dll
-
Size
67KB
-
MD5
05164f22c0b8a36ef01309e78d07b241
-
SHA1
618c2ea99a0994cf61fcd53d03f5d309fcf7dc4e
-
SHA256
1119d22cb1ecf7c402a6893cfdfb92c66340d80cb7791f33c3502f8932284b81
-
SHA512
63991123b116be8bac9ef7ce1c2913dcc8aa966679215506994cf7d6f2d43f22aa6fc0243759a01c8904e3e6a374bef37666df78a1631d3894eafa4a3c638678
-
SSDEEP
1536:s2CjOAhap6ntQDOx5622PAZVyJu7TZs6/JugDsb61Xy:s2DS769zwXZs6/K8C
Score
1/10
Malware Config
Signatures
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\lib\Mono.Nat.dll,#11⤵
Network
-
DNS95.221.229.192.in-addr.arpaRemote address:8.8.8.8:53Request95.221.229.192.in-addr.arpaIN PTRResponse -
DNSctldl.windowsupdate.comRemote address:8.8.8.8:53Requestctldl.windowsupdate.comIN AResponsectldl.windowsupdate.comIN CNAMEctldl.windowsupdate.com.delivery.microsoft.comctldl.windowsupdate.com.delivery.microsoft.comIN CNAMEwu-b-net.trafficmanager.netwu-b-net.trafficmanager.netIN CNAMEedge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.comedge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.comIN CNAMEdefault.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.comdefault.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.comIN A91.81.130.134default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.comIN A91.80.49.21default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.comIN A91.80.49.22default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.comIN A91.80.49.20default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.comIN A91.80.49.85
No results found
-
8.8.8.8:5395.221.229.192.in-addr.arpadns
DNS Request
95.221.229.192.in-addr.arpa
DNS Request
ctldl.windowsupdate.com
DNS Response
91.81.130.13491.80.49.2191.80.49.2291.80.49.2091.80.49.85