Overview

overview

10

Static

static

3

JaffaCakes...5f.exe

windows7-x64

10

JaffaCakes...5f.exe

windows10-2004-x64

10

$APPDATA/c...60.dll

windows7-x64

1

$APPDATA/c...60.dll

windows10-2004-x64

1

$APPDATA/c...at.dll

windows7-x64

3

$APPDATA/c...at.dll

windows10-2004-x64

3

$APPDATA/t...60.dll

windows7-x64

1

$APPDATA/t...60.dll

windows10-2004-x64

1

$APPDATA/t...lc.exe

windows7-x64

3

$APPDATA/t...lc.exe

windows10-2004-x64

3

$TEMP/GuestRummy.dll

windows7-x64

3

$TEMP/GuestRummy.dll

windows10-2004-x64

3

$TEMP/_net...mp.dll

windows7-x64

1

$TEMP/_net...mp.dll

windows10-2004-x64

1

$TEMP/logo...60.dll

windows7-x64

1

$TEMP/logo...60.dll

windows10-2004-x64

1

$TEMP/logo...ui.dll

windows7-x64

1

$TEMP/logo...ui.dll

windows10-2004-x64

1

Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    30-12-2024 18:44

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    $TEMP/_net/admin.cgi/msddslmp.dll

  • Size

    40KB

  • MD5

    ee526797868d4ef8407045a78dfb8e72

  • SHA1

    c17ecf8ae4518c6120ad9f9e91ad66bba239ead5

  • SHA256

    e457bf97dedc3a13e4d07665bb559edafde145798057d8d48cc892adc7ad1960

  • SHA512

    6a849dad8efe88731b96d96947591c21530dea3484093275cbead0d163bd26bc460f8166a26778e201ac0fe54d6a25291d4a02079ef6d027a1a2e6902b293427

  • SSDEEP

    384:C7rvZs15uzKmqlTnM4P9sVqv1LRKWjoB4s0vLdnS3BXvVMMcZ/byN2DHpQ6uEAWf:CPZs1wz/q5lG03jThvZuEg

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\$TEMP\_net\admin.cgi\msddslmp.dll,#1
    1⤵
      PID:2092

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads