Analysis

  • max time kernel
    96s
  • max time network
    144s
  • platform
    windows10-ltsc 2021_x64
  • resource
    win10ltsc2021-20241023-en
  • resource tags

    arch:x64arch:x86image:win10ltsc2021-20241023-enlocale:en-usos:windows10-ltsc 2021-x64system
  • submitted
    02-12-2024 15:52

General

  • Target

    libgee-0.8-2.dll

  • Size

    714KB

  • MD5

    73c4d268a10bfb6fbd6c40bc37f3788c

  • SHA1

    5c72856e2f1379fc90b2fafe422833495674ea05

  • SHA256

    c6c15f0c22d36741c6968052a6fa0ace4bc202e065b0c4bf0f2fd252ed41de2b

  • SHA512

    92850eba9ed1efcc444d6f6cda0cf75af0caf329481fe4c2202f42b319dd148a7e43eabffcf7b778d87dee9e4555e0c51e44a45f6476deb36182c5a0299f8840

  • SSDEEP

    6144:soIe/AC+wBxzjVPukoWoR6uEU6uMCtmETd9iVJeHLHwj2E98vV/EhZ9YalKL:Pvxzjc6vU9LtlTdGs8j29/EDGalKL

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\libgee-0.8-2.dll,#1
    1⤵
      PID:2096

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2096-2-0x0000000063A40000-0x0000000063A92000-memory.dmp

      Filesize

      328KB

    • memory/2096-10-0x0000000069140000-0x000000006918B000-memory.dmp

      Filesize

      300KB

    • memory/2096-9-0x0000000066000000-0x0000000066109000-memory.dmp

      Filesize

      1.0MB

    • memory/2096-8-0x0000000064940000-0x0000000064955000-memory.dmp

      Filesize

      84KB

    • memory/2096-7-0x0000000062E80000-0x0000000062E9D000-memory.dmp

      Filesize

      116KB

    • memory/2096-6-0x000000006B740000-0x000000006B750000-memory.dmp

      Filesize

      64KB

    • memory/2096-3-0x000000006DD00000-0x000000006DD0F000-memory.dmp

      Filesize

      60KB

    • memory/2096-4-0x00007FFD627E0000-0x00007FFD6292E000-memory.dmp

      Filesize

      1.3MB

    • memory/2096-1-0x000000006D580000-0x000000006D6DC000-memory.dmp

      Filesize

      1.4MB

    • memory/2096-5-0x00007FFD62EE0000-0x00007FFD62F08000-memory.dmp

      Filesize

      160KB

    • memory/2096-0-0x000000006C1C0000-0x000000006C27A000-memory.dmp

      Filesize

      744KB