8a19e614599148c986d418b262b9c83cf90f791e5dee17ac538e0e05eb595064 | Triage

Analysis

max time kernel
438s
max time network
1167s
platform
windows10-ltsc 2021_x64
resource
win10ltsc2021-20241023-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20241023-enlocale:en-usos:windows10-ltsc 2021-x64system
submitted
11-12-2024 15:58

Sharing

Report Analysis Logs

General

Target

WinSparkle.dll
Size

2.3MB
MD5

22b50ea2cc218122d5045e44dfc56146
SHA1

5b8f505770546bdd7e0f9bf038801dcd3059632f
SHA256

ec00ca430c363dc08dc937e729be7fc71f2c1b91c63a11d97cbb9c15e7b9e0b1
SHA512

624ead313209ccf719902ddbe760dd4ceb301dca352a7ced1e8fb0bccde09630f98ff8c0b8179d95286f200142a9612527bdbd0c46c659938c98d86e0a302602
SSDEEP

49152:yFrJVyRDJBNHBlVQNZLjOlBxj8uoGGH+63:yIflWk8uoGGHX3

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
4172	rundll32.exe
4172	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\WinSparkle.dll,#1
1⤵
- Suspicious use of SetWindowsHookEx
PID:4172

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads