Analysis

  • max time kernel
    118s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    20/11/2024, 05:34

General

  • Target

    f6806a885d455e122de826112b99b4afbe81eac9e6eb5263d79d2a7d4dc6b4fa.dll

  • Size

    3.5MB

  • MD5

    e055c330743df2a5e158777e0a50bde8

  • SHA1

    7597f601d7012ef8d989ee56985f40bce79f96b9

  • SHA256

    f6806a885d455e122de826112b99b4afbe81eac9e6eb5263d79d2a7d4dc6b4fa

  • SHA512

    d5efda7e76f8e73a5208e187a265e726fe7596cd25f6de75da86ec30364c2b8cbe382ccf51f2bb1841964998ac9dbde7a2f64b17010ec4d1bb12cb4ea2af2133

  • SSDEEP

    49152:WwApIj2UwOmhJfOkNqZbPxrH4jP/A7+Lc37acfmWd/5gPzpuOEeMzj+TALICmwdI:Wrmj3EA6qNJ7F7yTWnRYEeMzj7BxMxN

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 2 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\f6806a885d455e122de826112b99b4afbe81eac9e6eb5263d79d2a7d4dc6b4fa.dll,#1
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    PID:2524

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2524-6-0x000007FEF5F00000-0x000007FEF649D000-memory.dmp

    Filesize

    5.6MB

  • memory/2524-5-0x0000000077620000-0x0000000077622000-memory.dmp

    Filesize

    8KB

  • memory/2524-4-0x000007FEF5F23000-0x000007FEF611F000-memory.dmp

    Filesize

    2.0MB

  • memory/2524-2-0x0000000077620000-0x0000000077622000-memory.dmp

    Filesize

    8KB

  • memory/2524-0-0x0000000077620000-0x0000000077622000-memory.dmp

    Filesize

    8KB

  • memory/2524-9-0x000007FEF5F00000-0x000007FEF649D000-memory.dmp

    Filesize

    5.6MB

  • memory/2524-10-0x000007FEF5F23000-0x000007FEF611F000-memory.dmp

    Filesize

    2.0MB