Resubmissions

11/12/2024, 18:37 UTC

241211-w9f3rstpez 10

11/12/2024, 18:28 UTC

241211-w4jayatnat 10

Analysis

  • max time kernel
    100s
  • max time network
    101s
  • platform
    windows10-ltsc 2021_x64
  • resource
    win10ltsc2021-20241211-en
  • resource tags

    arch:x64arch:x86image:win10ltsc2021-20241211-enlocale:en-usos:windows10-ltsc 2021-x64system
  • submitted
    11/12/2024, 18:28 UTC

General

  • Target

    Plugins/NetworkConnections/Telerik.NetworkConnections.Windows.dll

  • Size

    33KB

  • MD5

    5889357424d717c8629c8bfabcd0be50

  • SHA1

    87e7047a40e24bd5ac23f89e072ee39a14a53023

  • SHA256

    3564b25b24569b8d8a0128f2f4bddec89c0b8986da7542d9c64aac730360a600

  • SHA512

    1af458742cefd4730d64b19ecc05460354f0e47a79cdcd7794877aa0f6c56cfb92f37a0daf66fedaec2a579eb0187d774b7d5ba1fff65d6ab1504df4c3668fad

  • SSDEEP

    768:2LpjNBBUyOzcB7RZbkTg+jO4HmBWKNTjNTlfKaE:2LB9VRpOg+jmBPFjF0aE

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\Plugins\NetworkConnections\Telerik.NetworkConnections.Windows.dll,#1
    1⤵
      PID:2972

    Network

    • flag-us
      DNS
      19.229.111.52.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      19.229.111.52.in-addr.arpa
      IN PTR
      Response
    No results found
    • 8.8.8.8:53
      19.229.111.52.in-addr.arpa
      dns
      72 B
      158 B
      1
      1

      DNS Request

      19.229.111.52.in-addr.arpa

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    We care about your privacy.

    This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.