Category | Machine | Started | Completed |
---|---|---|---|
FILE | s1_win7_x6403_us | Aug. 6, 2024, 9:20 a.m. | Aug. 6, 2024, 9:25 a.m. |
-
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\ann.dll,DllMain
1952-
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\ann.dll,DllMain
2112
-
-
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\ann.dll,
2052
Name | Response | Post-Analysis Lookup |
---|---|---|
No hosts contacted. |
IP Address | Status | Action |
---|---|---|
No hosts contacted. |
Suricata Alerts
No Suricata Alerts
Suricata TLS
No Suricata TLS
section | .gehcont |
section | _RDATA |
Bkav | W64.AIDetectMalware |
Lionic | Trojan.Win32.LsassDump.4!c |
Skyhigh | Artemis!Trojan |
ALYac | Generic.Trojan.LsassDump.D.44A005D8 |
Cylance | Unsafe |
VIPRE | Generic.Trojan.LsassDump.D.44A005D8 |
BitDefender | Generic.Trojan.LsassDump.D.44A005D8 |
Arcabit | Generic.Trojan.LsassDump.D.44A005D8 |
Symantec | Trojan.Gen.MBT |
ESET-NOD32 | a variant of Win64/HackTool.NanoDump.E |
McAfee | Artemis!4D40D90F8BB6 |
Avast | MalwareX-gen [Trj] |
Alibaba | HackTool:Win64/NanoDump.e7dc32f7 |
MicroWorld-eScan | Generic.Trojan.LsassDump.D.44A005D8 |
Rising | Trojan.CobaltStrike!8.EDF2 (CLOUD) |
Emsisoft | Generic.Trojan.LsassDump.D.44A005D8 (B) |
TrendMicro | TROJ_GEN.R002C0DH524 |
McAfeeD | ti!091CAB51D77F |
FireEye | Generic.Trojan.LsassDump.D.44A005D8 |
Sophos | ATK/NanoDump-C |
Detected | |
MAX | malware (ai score=88) |
Microsoft | Trojan:Win64/CobaltStrike.UH!MTB |
GData | Generic.Trojan.LsassDump.D.44A005D8 |
Varist | W64/ABApplication.DTWH-6696 |
DeepInstinct | MALICIOUS |
Ikarus | Trojan.Win64.Hacktool |
TrendMicro-HouseCall | TROJ_GEN.R002C0DH524 |
AVG | MalwareX-gen [Trj] |
alibabacloud | HackTool:Win/NanoDump.E |