08975e2665243e02ad55dd53892d907554b297bc19ba2e4d11334eb67b45f3a6 | Triage

Analysis

max time kernel
119s
max time network
131s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
19/11/2024, 18:51

Sharing

Report Analysis Logs

General

Target

Nezur.dll
Size

15.2MB
MD5

79b4048105f34e39143b5ec9cbbb754c
SHA1

270edf0a5d5e5801171435b5f8c813cbac3ebc20
SHA256

9a2601c7d10b7fb896429cc13ca6961f29dfc594b6eb1d4f7bebd36d4513a6d7
SHA512

e148df038131a5a4fece47c22286d0c5638e21019213d4c840abf277a23456422873a4ba5535f926ffb4bb12771393d8316306709f2cfb0354e4b2c9cbf44c4e
SSDEEP

393216:2EI9J9jTykIBEJy66FfEGdDS7OVIkXPqgK1SLoj:2t1mkIWg66LDS7UIkX/wSE

Score

5^/10

Malware Config

Signatures

Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs

pid	Process
2384	rundll32.exe
2384	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\Nezur.dll,#1
1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
PID:2384

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads