Analysis

  • max time kernel
    150s
  • max time network
    156s
  • platform
    windows10-ltsc 2021_x64
  • resource
    win10ltsc2021-20241023-en
  • resource tags

    arch:x64arch:x86image:win10ltsc2021-20241023-enlocale:en-usos:windows10-ltsc 2021-x64system
  • submitted
    02-12-2024 15:52

General

  • Target

    libxmlbird.dll

  • Size

    63KB

  • MD5

    aa96b38f502a0a77e8f8c66b51e4fcab

  • SHA1

    8230d1d80defcf2fe6f13b4f1d35874835121881

  • SHA256

    e25d658ec2113f029c90ef10774b916371a503150a5a0be87e6cbf3c38915790

  • SHA512

    9569d2607a4f2b7ae1b33c4ed838d031153eccb778138bb6dfd9b4646d041596e363a64c7ad80fc804462542e1ae76610ee322e8f7ef9cdfb09743374bdb702f

  • SSDEEP

    1536:HJWDe8OYrpcBSSH1AP8+wCU+8fjSFvYfo2rrFvVIkfs61:Yi8OYr/SH1Ak+M1

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\libxmlbird.dll,#1
    1⤵
      PID:336

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/336-0-0x000000006EE80000-0x000000006EE97000-memory.dmp

      Filesize

      92KB

    • memory/336-3-0x00007FFFD3FE0000-0x00007FFFD4008000-memory.dmp

      Filesize

      160KB

    • memory/336-7-0x0000000066000000-0x0000000066109000-memory.dmp

      Filesize

      1.0MB

    • memory/336-6-0x000000006B740000-0x000000006B750000-memory.dmp

      Filesize

      64KB

    • memory/336-4-0x0000000064940000-0x0000000064955000-memory.dmp

      Filesize

      84KB

    • memory/336-5-0x0000000069140000-0x000000006918B000-memory.dmp

      Filesize

      300KB

    • memory/336-2-0x0000000063A40000-0x0000000063A92000-memory.dmp

      Filesize

      328KB

    • memory/336-1-0x00007FFFC4B30000-0x00007FFFC4C7E000-memory.dmp

      Filesize

      1.3MB