671c2b036deed4e63f32adb4834fc6b2d9479d04a64025fa0245e6797add02e6 | Triage

Resubmissions

16/11/2024, 13:28 UTC

241116-qq11yaxejd 10

16/11/2024, 13:22 UTC

241116-ql9ghs1mcj 10

Analysis

max time kernel
92s
max time network
203s
platform
windows11-21h2_x64
resource
win11-20241007-en
resource tags

arch:x64arch:x86image:win11-20241007-enlocale:en-usos:windows11-21h2-x64system
submitted
16/11/2024, 13:28 UTC

Sharing

Report Analysis Logs

General

Target

Plugins/fzAgyDYa.dll
Size

181KB
MD5

21aaf842f7518fdc7038c09a78292c7e
SHA1

ff68658d3c1d6aecf1bb0e41c0e62c7dec24885f
SHA256

f0a82d67f8b53de0915c2c8853e47b191aa24be180c398f61c5332e558094e4a
SHA512

1cfe3bcc66ad0aeb9fca5d74253dba2efcf777ee15266828edb0d4a196f9a6e41871c51fc4eb0d7022b8183e768a62b38dfe974f7a65a2e259141eeb93a88458
SSDEEP

3072:A3NNnhy2Yt+HCQKrPCrCihOZNPd14hlaWWfiooIbuTyXb3tk:Ge2Yt+XKrOCsed14hlh5tIbueXb

Score

1^/10

Malware Config

Signatures

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\Plugins\fzAgyDYa.dll,#1
1⤵
PID:3684

Network

DNS

11.227.111.52.in-addr.arpa

Remote address:

8.8.8.8:53

Request

11.227.111.52.in-addr.arpa

IN PTR

Response

No results found

8.8.8.8:53

11.227.111.52.in-addr.arpa

dns

72 B
158 B
1
1

DNS Request

11.227.111.52.in-addr.arpa

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads