671c2b036deed4e63f32adb4834fc6b2d9479d04a64025fa0245e6797add02e6 | Triage

Resubmissions

16/11/2024, 13:28 UTC

241116-qq11yaxejd 10

16/11/2024, 13:22 UTC

241116-ql9ghs1mcj 10

Analysis

max time kernel
90s
max time network
99s
platform
windows11-21h2_x64
resource
win11-20241023-en
resource tags

arch:x64arch:x86image:win11-20241023-enlocale:en-usos:windows11-21h2-x64system
submitted
16/11/2024, 13:22 UTC

Sharing

Report Analysis Logs

General

Target

Plugins/EVa7gBMKoaHmLC.dll
Size

170KB
MD5

64a3d908b8a5feff2bccfc67f3a67dbd
SHA1

a17d7e5fa57c99a067cac459cb507b625dac254e
SHA256

6ea1ae7ab496666c0117fc20e704bfb6104b13cfb0408073a09689f863fa64b1
SHA512

66374d720230799bea6ac6cfe3faadc37fd775a49d40c04facae1caf1ec658956bbda54ba75287d7128b19b97971bd933a64469da8e0884225c5a8d8b9423ccc
SSDEEP

3072:/bFHKx2Vpgdk6BCNs19kPVoPsb7oR4ZkvEfxMxf4t8BkVb0Uc:/TVpgdkpNs19I6Pe7oR4ZAEfx+LiVb

Score

1^/10

Malware Config

Signatures

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\Plugins\EVa7gBMKoaHmLC.dll,#1
1⤵
PID:5036

Network

DNS

11.227.111.52.in-addr.arpa

Remote address:

8.8.8.8:53

Request

11.227.111.52.in-addr.arpa

IN PTR

Response

No results found

8.8.8.8:53

11.227.111.52.in-addr.arpa

dns

72 B
158 B
1
1

DNS Request

11.227.111.52.in-addr.arpa

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads