Summary | ZeroBOX

Category	Machine	Started	Completed
FILE	s1_win7_x6403_us	Feb. 3, 2025, 10:03 a.m.	Feb. 3, 2025, 10:06 a.m.

Size	19.0KB
Type	PE32+ executable (DLL) (console) x86-64, for MS Windows
MD5	`924239278b93e09b6e97125a18079f70`
SHA256	`cfe8de2fc5b222a84e6e8a537a45027cc929004782e04fbb6f6eb40da707061e`
CRC32	`5FF08DFD`
ssdeep	`384:WdOouja52V5E1qYEXrCKvVtqMzAU58zIbVHs6OWkLUW:WoprC0tHcU52gVfu`
PDB Path	C:\Users\LItmus\Downloads\GoDhijacking\bin\DLL Maker\x64\Release\DLL Maker.pdb
Yara	PE_Header_Zero - PE File Signature IsDLL - (no description) IsPE64 - (no description) UPX_Zero - UPX packed file OS_Processor_Check_Zero - OS Processor Check

rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\rcdll.dll,Handler
1072
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\rcdll.dll,Handler
  2304
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\rcdll.dll,RCW
2148
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\rcdll.dll,RCW
  2340
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\rcdll.dll,RC
2060
- rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\rcdll.dll,RC
  2388
rundll32.exe "C:\Windows\System32\rundll32.exe" C:\Users\test22\AppData\Local\Temp\rcdll.dll,
2240

Name	Response	Post-Analysis Lookup
No hosts contacted.

IP Address	Status	Action
No hosts contacted.

No Suricata Alerts

No Suricata TLS

pdb_path

C:\Users\LItmus\Downloads\GoDhijacking\bin\DLL Maker\x64\Release\DLL Maker.pdb

rcdll.dll