Analysis
-
max time kernel
430s -
max time network
1152s -
platform
windows11-21h2_x64 -
resource
win11-20241007-en -
resource tags
-
submitted
11/12/2024, 18:37 UTC
General
-
Target
Plugins/NetworkConnections/Telerik.NetworkConnections.Windows.dll
-
Size
33KB
-
MD5
5889357424d717c8629c8bfabcd0be50
-
SHA1
87e7047a40e24bd5ac23f89e072ee39a14a53023
-
SHA256
3564b25b24569b8d8a0128f2f4bddec89c0b8986da7542d9c64aac730360a600
-
SHA512
1af458742cefd4730d64b19ecc05460354f0e47a79cdcd7794877aa0f6c56cfb92f37a0daf66fedaec2a579eb0187d774b7d5ba1fff65d6ab1504df4c3668fad
-
SSDEEP
768:2LpjNBBUyOzcB7RZbkTg+jO4HmBWKNTjNTlfKaE:2LB9VRpOg+jmBPFjF0aE
Score
1/10
Malware Config
Signatures
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\Plugins\NetworkConnections\Telerik.NetworkConnections.Windows.dll,#11⤵
Network
-
DNS81.144.22.2.in-addr.arpaRemote address:8.8.8.8:53Request81.144.22.2.in-addr.arpaIN PTRResponse81.144.22.2.in-addr.arpaIN PTRa2-22-144-81deploystaticakamaitechnologiescom -
DNSctldl.windowsupdate.comRemote address:8.8.8.8:53Requestctldl.windowsupdate.comIN AResponsectldl.windowsupdate.comIN CNAMEctldl.windowsupdate.com.delivery.microsoft.comctldl.windowsupdate.com.delivery.microsoft.comIN CNAMEwu-b-net.trafficmanager.netwu-b-net.trafficmanager.netIN CNAMEdownload.windowsupdate.com.edgesuite.netdownload.windowsupdate.com.edgesuite.netIN CNAMEa767.dspw65.akamai.neta767.dspw65.akamai.netIN A2.22.144.81a767.dspw65.akamai.netIN A2.22.144.73
No results found
-
8.8.8.8:5381.144.22.2.in-addr.arpadns
DNS Request
81.144.22.2.in-addr.arpa
DNS Request
ctldl.windowsupdate.com
DNS Response
2.22.144.812.22.144.73