Resubmissions

13-01-2025 01:19

250113-bpjmya1nbj 3

12-01-2025 11:10

250112-m91bzasmbp 10

Analysis

  • max time kernel
    147s
  • max time network
    155s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    12-01-2025 11:10

General

  • Target

    crack.dll

  • Size

    5.0MB

  • MD5

    b5b1b26e855eda6268b9a2008e0fce86

  • SHA1

    d7925f7de5835e3564b187d8654bb9305ea945fb

  • SHA256

    06dec4f9857f7b9a43157756606546d04a0f34c87681c7db9aab9125a43b33a7

  • SHA512

    14ad2e93ed5876dd246ce6f32674e994b4f35a5acbb1ac46388bebc682a70ce4eca974fda102c273c71dae3c9bc7b69f965fd636cb2d5c579de9cd23e8b35799

  • SSDEEP

    98304:j+YCYfXbb8DckgAEhxWiHF/5DoNZ2qkFVwz7583lfdmjLdGGf:jP8QDDRF/eNsqgiZ

Score
9/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\crack.dll,#1
    1⤵
    • Identifies VirtualBox via ACPI registry values (likely anti-VM)
    • Checks BIOS information in registry
    • Checks whether UAC is enabled
    PID:2312

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2312-1-0x0000000077060000-0x0000000077A3F000-memory.dmp

    Filesize

    9.9MB

  • memory/2312-0-0x0000000077060000-0x0000000077A3F000-memory.dmp

    Filesize

    9.9MB

  • memory/2312-2-0x0000000077060000-0x0000000077A3F000-memory.dmp

    Filesize

    9.9MB

  • memory/2312-4-0x0000000077060000-0x0000000077A3F000-memory.dmp

    Filesize

    9.9MB

  • memory/2312-3-0x0000000077060000-0x0000000077A3F000-memory.dmp

    Filesize

    9.9MB

  • memory/2312-5-0x0000000077060000-0x0000000077A3F000-memory.dmp

    Filesize

    9.9MB

  • memory/2312-6-0x0000000077060000-0x0000000077A3F000-memory.dmp

    Filesize

    9.9MB

  • memory/2312-7-0x0000000077060000-0x0000000077A3F000-memory.dmp

    Filesize

    9.9MB