Analysis

  • max time kernel
    95s
  • max time network
    141s
  • platform
    windows10-ltsc 2021_x64
  • resource
    win10ltsc2021-20241023-en
  • resource tags

    arch:x64arch:x86image:win10ltsc2021-20241023-enlocale:en-usos:windows10-ltsc 2021-x64system
  • submitted
    02-12-2024 15:52

General

  • Target

    libcairo-2.dll

  • Size

    940KB

  • MD5

    28d8c59aee9b9ebcd1c7b47c04bb24ce

  • SHA1

    a30a34ab94562da1e63329416db6892c4535a33f

  • SHA256

    7fd06899bfd282b6fc03f102cb131fbf014dee3c477ef48c6ec11b26ba9e2899

  • SHA512

    eea926a208d87a0ffd6d61d466f877fe2bba061d685cb4d36977ab30de44c023254c0843bf63ca85d470914778ba6b21bdfca7ab3fc0976a50a89850b8cb611b

  • SSDEEP

    24576:R9uckDlEaUAirwbeMG1fmfbxskS21rJhVKpaDnANqz4cKfzao:f+yXwCMG1fmftsmKiUVfzao

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\libcairo-2.dll,#1
    1⤵
      PID:3092

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/3092-9-0x0000000061600000-0x000000006166A000-memory.dmp

      Filesize

      424KB

    • memory/3092-16-0x0000000069140000-0x000000006918B000-memory.dmp

      Filesize

      300KB

    • memory/3092-15-0x00007FFF15E60000-0x00007FFF15E88000-memory.dmp

      Filesize

      160KB

    • memory/3092-13-0x00007FFF14C90000-0x00007FFF14DDE000-memory.dmp

      Filesize

      1.3MB

    • memory/3092-14-0x000000006FC40000-0x000000006FDA1000-memory.dmp

      Filesize

      1.4MB

    • memory/3092-11-0x0000000066000000-0x0000000066109000-memory.dmp

      Filesize

      1.0MB

    • memory/3092-10-0x0000000068F40000-0x0000000068F6D000-memory.dmp

      Filesize

      180KB

    • memory/3092-8-0x0000000064940000-0x0000000064955000-memory.dmp

      Filesize

      84KB

    • memory/3092-7-0x00000000626C0000-0x00000000626DA000-memory.dmp

      Filesize

      104KB

    • memory/3092-6-0x0000000062E80000-0x0000000062E9D000-memory.dmp

      Filesize

      116KB

    • memory/3092-4-0x0000000064F80000-0x0000000064FD3000-memory.dmp

      Filesize

      332KB

    • memory/3092-3-0x00000000693C0000-0x0000000069465000-memory.dmp

      Filesize

      660KB

    • memory/3092-2-0x0000000065300000-0x00000000653AD000-memory.dmp

      Filesize

      692KB

    • memory/3092-1-0x0000000061440000-0x000000006145C000-memory.dmp

      Filesize

      112KB

    • memory/3092-0-0x0000000068DC0000-0x0000000068EB1000-memory.dmp

      Filesize

      964KB

    • memory/3092-12-0x0000000070540000-0x000000007057F000-memory.dmp

      Filesize

      252KB

    • memory/3092-5-0x0000000068B40000-0x0000000068B80000-memory.dmp

      Filesize

      256KB