Analysis
-
max time kernel
62s -
max time network
69s -
platform
windows10-ltsc 2021_x64 -
resource
win10ltsc2021-20241211-en -
resource tags
-
submitted
06-01-2025 19:26
General
-
Target
Resources/maddisAsm_.dll
-
Size
64KB
-
MD5
11efab4068cb4058207959e2638c2c1a
-
SHA1
b1eac0879dcda14bdc0c2efd7f261d7c175208c3
-
SHA256
11e3568f497c40331ee4a9e9973967e61b224e19204e09ed7451da3b74bd2ff5
-
SHA512
ced6167612674232429c25e52ba051994b09fdaeaf3316505904456ef8d7063f2eb03b5a158f0a424f0ecb49673e6a3d6b57d61183c5f8402da3fe53af0bd185
-
SSDEEP
1536:eNy3eqMne0sXB0IWtCLwEJhY0w1FwbiD7wlwei7:CqMnfIB04LwEJhY0w1UTnE
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\Resources\maddisAsm_.dll,#11⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\Resources\maddisAsm_.dll,#12⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.6MB
-
Filesize
7.6MB
-
Filesize
4KB
-
Filesize
7.6MB
-
Filesize
72KB
-
Filesize
1.1MB
-
Filesize
1.9MB
-
Filesize
2.6MB
-
Filesize
7.6MB