6dba900ba4e73e88cf3d3a062f71735f30e615436d01aa96d18545e97d31a5a4 | Triage

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
21-12-2024 14:45

Sharing

Report Analysis Logs

General

Target

Nezur.dll
Size

13.5MB
MD5

1b626d41591cf75d4abf0b4ab19aff5e
SHA1

a31cc603496cff04b48fb20bd8b1daecf0fa2422
SHA256

06086a415130d6af88acc2cae9803129257901552335adb35d7ae3c717a0bebf
SHA512

55758cb2d1f9d82e78f8373cb2d2548de97a6d6999ab0f4c1e4991cb7fc4c81f3b9455b8f9200efb4af34a6c467b24926116ec5bd8d0d55c26df6a630c34b65f
SSDEEP

393216:CR49RNvgubUNaugC+eJJFPU69DNBp3iU700U:CeDyUUeWJDdRNU

Score

5^/10

Malware Config

Signatures

Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs

pid	Process
2124	rundll32.exe
2124	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\Nezur.dll,#1
1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
PID:2124

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads