1a12342028912118504c3efb1145c4bc713cca6eb591866f26b2d7d9adc192ca | Triage

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
18-11-2024 07:54

Sharing

Report Analysis Logs

General

Target

LPCScannedDocs-CopyrightGNP.CPL.dll
Size

4KB
MD5

3416cd045697fbdce8ee3af98e0c8d81
SHA1

b488215ca71436c17f9b75559a46bc37f812d1bf
SHA256

1a12342028912118504c3efb1145c4bc713cca6eb591866f26b2d7d9adc192ca
SHA512

2e4ec4a4fb29397966a9336d0d0731f97db60225a4807c13543c9a3e60e1bdec073a468d76257fae78e73cf0d4c34eccf7481185266a2325dcfb6a6707336bc2

Score

8^/10

Malware Config

Signatures

Blocklisted process makes network request 2 IoCs

Processes:

rundll32.exe

flow pid process

3 2964 rundll32.exe
4 2964 rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\LPCScannedDocs-CopyrightGNP.CPL.dll,#1
1⤵
- Blocklisted process makes network request
PID:2964

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2964-2-0x0000000075310000-0x0000000075315000-memory.dmp

Filesize
20KB

Download
memory/2964-1-0x0000000075300000-0x0000000075305000-memory.dmp

Filesize
20KB

Download
memory/2964-0-0x0000000075310000-0x0000000075315000-memory.dmp

Filesize
20KB

Download
memory/2964-4-0x0000000075300000-0x0000000075305000-memory.dmp

Filesize
20KB

Download