6a051afc95e34431e4abbe7d4a4de66f07c80ea2dc42cbe5e5816ea3da6eaee6

Analysis

max time kernel
858s
max time network
861s
platform
windows11-21h2_x64
resource
win11-20250218-en
resource tags

arch:x64arch:x86image:win11-20250218-enlocale:en-usos:windows11-21h2-x64system
submitted
25/02/2025, 14:57

Target

Dangerous RAT/Mono.Cecil.dll
Size

305KB
MD5

851ec9d84343fbd089520d420348a902
SHA1

f8e2a80130058e4db3cf569cf4297d07d05c93e0
SHA256

cdadc26c09f869e21053ee1a0acf3b2d11df8edd599fe9c377bd4d3ce1c9cda9
SHA512

5e1d1b953fda4a905749eff8c4133a164748ba08c4854348539d335cf53c873eae7c653807a2701bf307693a049ae6c523bd1497a8e659bdea0a71085a58a5f1
SSDEEP

6144:ueMQM/aMOZabe3h1PtRjAqmYVNf3yTXcYBbt6KMBhu:uF/aMDb8BtRjA7XcYNclB

Score

1^/10

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\Dangerous RAT\Mono.Cecil.dll",#1
1⤵
PID:4888

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --string-annotations --always-read-main-dll --field-trial-handle=4104,i,8156301195647385391,612045039718669237,262144 --variations-seed-version --mojo-platform-channel-handle=3780 /prefetch:14
1⤵
PID:4004

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --string-annotations --always-read-main-dll --field-trial-handle=5336,i,8156301195647385391,612045039718669237,262144 --variations-seed-version --mojo-platform-channel-handle=5328 /prefetch:14
1⤵
PID:2004

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --string-annotations --always-read-main-dll --field-trial-handle=4024,i,8156301195647385391,612045039718669237,262144 --variations-seed-version --mojo-platform-channel-handle=756 /prefetch:14
1⤵
PID:1084