Analysis
-
max time kernel
93s -
max time network
141s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
20/11/2024, 05:03
General
-
Target
2218bdc1a141068e124211828141b5131bf76c71e9f33535fc241febf3f92a05.dll
-
Size
13.7MB
-
MD5
9f8a34d5aad84a6cf84b457311aedc79
-
SHA1
5e52ac0f843d3eabd953c074c50bb9d31ea366a5
-
SHA256
2218bdc1a141068e124211828141b5131bf76c71e9f33535fc241febf3f92a05
-
SHA512
8f10be170b5cb5f7ac6a2219251ce98dc0e97181f31f0655d24c2a6182b8fc480cca3834567c1b17d105530372141174718f323bff4a35b30f68fd7ae641ffe6
-
SSDEEP
196608:3NfuUZj2vtrAZ3VXQQv0sOAeym0a2YXRjoYSSnnoSC:3N5jOgVXQM0sOAewhcpX
Score
5/10
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
-
Drops file in Program Files directory 2 IoCs
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Windows\system32\regsvr32.exeregsvr32 /s C:\Users\Admin\AppData\Local\Temp\2218bdc1a141068e124211828141b5131bf76c71e9f33535fc241febf3f92a05.dll1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Drops file in Program Files directory
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
7.8MB
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
22.5MB
-
Filesize
22.5MB
-
Filesize
7.8MB
-
Filesize
22.5MB