Overview

overview

10

Static

static

3

Trommehvirvlens.exe

windows7-x64

10

Trommehvirvlens.exe

windows10-2004-x64

10

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

Simultanto...-7.dll

windows7-x64

1

Simultanto...-7.dll

windows10-2004-x64

1

Simultanto...0.html

windows7-x64

3

Simultanto...0.html

windows10-2004-x64

3

VirtualDri...in.dll

windows7-x64

1

VirtualDri...in.dll

windows10-2004-x64

1

Analysis

  • max time kernel
    120s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    28-12-2024 23:33

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Simultantolke/Sydhavss211/Stopventils/libffi-7.dll

  • Size

    29KB

  • MD5

    43c639b6ba8415f94b8fc27a96042650

  • SHA1

    07ed717e5032f2025f759ef484fc25178922768c

  • SHA256

    d07afee9199e6cbf406f7e6a7f9673296bda5244e5ca79a37177226f12801d35

  • SHA512

    eeadc1f19a633ab2b05c4466de6d35cfb7c76a731d8ac23e5cbf7005ed905874c43bfc6f5da9aeeab66aad00584862df691e7ae8e5da805ee1d9608cb6663b0d

  • SSDEEP

    384:PC9/Hckzur4W7phM9EsXbD37e9t8TlfJJD+QiUZ5ZqtIsNYF5VYJO0mnwrRCXWxU:q9UkeXMNXbD37e9LUZfqtkLVYJXuWc

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\Simultantolke\Sydhavss211\Stopventils\libffi-7.dll,#1
    1⤵
      PID:3068

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/3068-0-0x000007FEFAFA0000-0x000007FEFAFB0000-memory.dmp

      Filesize

      64KB

      Download