d1ed15a69c112b048936201fe8e816828346168cf02838086d89843a4041b94b

Analysis

max time kernel
13s
max time network
19s
platform
windows7_x64
resource
win7-20241010-en
resource tags

arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
submitted
07-02-2025 18:35

Target

d4a1f8bfa09c151163399befc009d4d1e39b2c8adaff3489d9bd31965fc56910.dll
Size

1.3MB
MD5

7776efe8ac7d8b3b6c27f4ba8e7b1545
SHA1

edb2bba906cf50d19338a1c8333e67e5f4cddee9
SHA256

d4a1f8bfa09c151163399befc009d4d1e39b2c8adaff3489d9bd31965fc56910
SHA512

89906fe0afc8714b3757dd1d6c0e5fa6701bc2581831c0efeb5f33bcf06fbae2d160d6f17118866f0bcc7081de532dec57f44f29777a77cbef0b27fda29e6b82
SSDEEP

24576:LO2dVaRrhSk8Bhwm2z8f6ZzoIo9Zx/f9FwwxlXwFU8Ygbi:wrEk8wm2Yf6Zdo9Zx/nrxRR8F+

Score

5^/10

Suspicious use of NtCreateThreadExHideFromDebugger 1 IoCs

pid	Process
2396	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\d4a1f8bfa09c151163399befc009d4d1e39b2c8adaff3489d9bd31965fc56910.dll,#1
1⤵
- Suspicious use of NtCreateThreadExHideFromDebugger
PID:2396