Analysis
-
max time kernel
101s -
max time network
127s -
platform
windows10-ltsc 2021_x64 -
resource
win10ltsc2021-20241211-en -
resource tags
-
submitted
11/12/2024, 18:28 UTC
General
-
Target
ImportExport/VSWebTestExport.dll
-
Size
44KB
-
MD5
03fcff4a49159e5c405420df08b37757
-
SHA1
89b0bc35a78f56212e53556e45d1f9039d2488d1
-
SHA256
5566857f213582ddca5d202bc19a1b649061437fbfd7e699afd64986fea5fb61
-
SHA512
8cb0d400b848d01e74a0050cdd779224d96db3b87ea393a098a5e75c52c16fd3b3bf20f49196da976af61960c865620ef82ff0295774e2e67ac5c92949c248c4
-
SSDEEP
768:obJ9YyrdngGT7Enn/IRXILJtGiU83aTwBmxCnF0Cxf1mlD0Z:EyEw/LtrU83aImx4fIIZ
Score
1/10
Malware Config
Signatures
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\ImportExport\VSWebTestExport.dll,#11⤵
Network
-
DNS22.160.190.20.in-addr.arpaRemote address:8.8.8.8:53Request22.160.190.20.in-addr.arpaIN PTRResponse -
DNS19.229.111.52.in-addr.arpaRemote address:8.8.8.8:53Request19.229.111.52.in-addr.arpaIN PTRResponse
No results found
-
8.8.8.8:5322.160.190.20.in-addr.arpadns
DNS Request
22.160.190.20.in-addr.arpa
-
8.8.8.8:5319.229.111.52.in-addr.arpadns
DNS Request
19.229.111.52.in-addr.arpa