ann.dll| Category | Machine | Started | Completed |
|---|---|---|---|
| FILE | s1_win7_x6403_us | Aug. 6, 2024, 9:20 a.m. | Aug. 6, 2024, 9:25 a.m. |
-
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\ann.dll,DllMain
1952-
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\ann.dll,DllMain
2112
-
-
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\ann.dll,
2052
| Name | Response | Post-Analysis Lookup |
|---|---|---|
| No hosts contacted. | ||
| IP Address | Status | Action |
|---|---|---|
| No hosts contacted. | ||
Suricata Alerts
No Suricata Alerts
Suricata TLS
No Suricata TLS
| section | .gehcont |
| section | _RDATA |
| Bkav | W64.AIDetectMalware |
| Lionic | Trojan.Win32.LsassDump.4!c |
| Skyhigh | Artemis!Trojan |
| ALYac | Generic.Trojan.LsassDump.D.44A005D8 |
| Cylance | Unsafe |
| VIPRE | Generic.Trojan.LsassDump.D.44A005D8 |
| BitDefender | Generic.Trojan.LsassDump.D.44A005D8 |
| Arcabit | Generic.Trojan.LsassDump.D.44A005D8 |
| Symantec | Trojan.Gen.MBT |
| ESET-NOD32 | a variant of Win64/HackTool.NanoDump.E |
| McAfee | Artemis!4D40D90F8BB6 |
| Avast | MalwareX-gen [Trj] |
| Alibaba | HackTool:Win64/NanoDump.e7dc32f7 |
| MicroWorld-eScan | Generic.Trojan.LsassDump.D.44A005D8 |
| Rising | Trojan.CobaltStrike!8.EDF2 (CLOUD) |
| Emsisoft | Generic.Trojan.LsassDump.D.44A005D8 (B) |
| TrendMicro | TROJ_GEN.R002C0DH524 |
| McAfeeD | ti!091CAB51D77F |
| FireEye | Generic.Trojan.LsassDump.D.44A005D8 |
| Sophos | ATK/NanoDump-C |
| Detected | |
| MAX | malware (ai score=88) |
| Microsoft | Trojan:Win64/CobaltStrike.UH!MTB |
| GData | Generic.Trojan.LsassDump.D.44A005D8 |
| Varist | W64/ABApplication.DTWH-6696 |
| DeepInstinct | MALICIOUS |
| Ikarus | Trojan.Win64.Hacktool |
| TrendMicro-HouseCall | TROJ_GEN.R002C0DH524 |
| AVG | MalwareX-gen [Trj] |
| alibabacloud | HackTool:Win/NanoDump.E |