Analysis

  • max time kernel
    145s
  • max time network
    162s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20250313-de
  • resource tags

    arch:x64arch:x86image:win10v2004-20250313-delocale:de-deos:windows10-2004-x64systemwindows
  • submitted
    18/03/2025, 22:53 UTC

General

  • Target

    R.E.P.O/REPO_Data/Managed/Mono.Security.dll

  • Size

    235KB

  • MD5

    0841dfacf30ea97bd834716188a2d08f

  • SHA1

    61465571018211f19b29a012323c3bfed788b0d4

  • SHA256

    98d714abde46476d8ec2a729d178fd24b9bb86cfa6416defac6b46220143181d

  • SHA512

    79dc5ad0b44fa9eb272e16b625c560ca946411b3862deca2395c888130f07e09c28ee0b97b9f0a5225c4ca932901ba0616e659d34bda7d676be2409a16e27076

  • SSDEEP

    6144:0UjTQ70cnf8MoVRxS9iJdBF119RJXG2y2+Q:lEiH119RJXV3

Score
1/10

Malware Config

Signatures

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\R.E.P.O\REPO_Data\Managed\Mono.Security.dll,#1
    1⤵
      PID:4804

    Network

    • flag-us
      DNS
      g.bing.com
      Remote address:
      8.8.8.8:53
      Request
      g.bing.com
      IN A
      Response
      g.bing.com
      IN CNAME
      g-bing-com.ax-0001.ax-msedge.net
      g-bing-com.ax-0001.ax-msedge.net
      IN CNAME
      ax-0001.ax-msedge.net
      ax-0001.ax-msedge.net
      IN A
      150.171.28.10
      ax-0001.ax-msedge.net
      IN A
      150.171.27.10
    • flag-us
      DNS
      tse1.mm.bing.net
      Remote address:
      8.8.8.8:53
      Request
      tse1.mm.bing.net
      IN A
      Response
      tse1.mm.bing.net
      IN CNAME
      mm-mm.bing.net.trafficmanager.net
      mm-mm.bing.net.trafficmanager.net
      IN CNAME
      ax-0001.ax-msedge.net
      ax-0001.ax-msedge.net
      IN A
      150.171.27.10
      ax-0001.ax-msedge.net
      IN A
      150.171.28.10
    • flag-us
      DNS
      c.pki.goog
      Remote address:
      8.8.8.8:53
      Request
      c.pki.goog
      IN A
      Response
      c.pki.goog
      IN CNAME
      pki-goog.l.google.com
      pki-goog.l.google.com
      IN A
      142.250.200.35
    • flag-gb
      GET
      http://c.pki.goog/r/r1.crl
      Remote address:
      142.250.200.35:80
      Request
      GET /r/r1.crl HTTP/1.1
      Cache-Control: max-age = 3000
      Connection: Keep-Alive
      Accept: */*
      If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMT
      User-Agent: Microsoft-CryptoAPI/10.0
      Host: c.pki.goog
      Response
      HTTP/1.1 304 Not Modified
      Date: Tue, 18 Mar 2025 22:53:20 GMT
      Expires: Tue, 18 Mar 2025 23:43:20 GMT
      Age: 420
      Last-Modified: Thu, 25 Jul 2024 14:48:00 GMT
      Cache-Control: public, max-age=3000
      Vary: Accept-Encoding
    • 150.171.28.10:443
      g.bing.com
      tls
      2.0kB
      9.3kB
      21
      18
    • 150.171.27.10:443
      tse1.mm.bing.net
      tls
      125.0kB
      3.6MB
      2642
      2636
    • 150.171.27.10:443
      tse1.mm.bing.net
      tls
      1.2kB
      6.9kB
      15
      13
    • 150.171.27.10:443
      tse1.mm.bing.net
      tls
      1.2kB
      6.9kB
      15
      13
    • 150.171.27.10:443
      tse1.mm.bing.net
      tls
      1.2kB
      6.9kB
      15
      13
    • 150.171.27.10:443
      tse1.mm.bing.net
      tls
      1.2kB
      6.9kB
      15
      13
    • 142.250.200.35:80
      http://c.pki.goog/r/r1.crl
      http
      476 B
      394 B
      6
      4

      HTTP Request

      GET http://c.pki.goog/r/r1.crl

      HTTP Response

      304
    • 8.8.8.8:53
      g.bing.com
      dns
      56 B
      148 B
      1
      1

      DNS Request

      g.bing.com

      DNS Response

      150.171.28.10
      150.171.27.10

    • 8.8.8.8:53
      tse1.mm.bing.net
      dns
      62 B
      170 B
      1
      1

      DNS Request

      tse1.mm.bing.net

      DNS Response

      150.171.27.10
      150.171.28.10

    • 8.8.8.8:53
      c.pki.goog
      dns
      56 B
      107 B
      1
      1

      DNS Request

      c.pki.goog

      DNS Response

      142.250.200.35

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    We care about your privacy.

    This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.