d1a0115f4afe30d9a973cb18bf95d34b67b2d548b4d49989fd0e36399dc562d0

Resubmissions

23-06-2024 14:14

17-06-2024 16:58

max time kernel
139s
max time network
126s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
23-06-2024 14:14

Target

__x64___setup___x32__/AppxSip/deploymentcsps.dll
Size

76KB
MD5

1d6dffb182135656f682353bf01d3bf1
SHA1

e6a1c4915364e4ce5bb90b51b38dbb45007dbd2b
SHA256

d3ecce1709057d83119d2fc9295848dc096ebf682aea0e9bda49e31bd5397fda
SHA512

754a746b08074db21cf72d1b3b9574ba75b7c893ea4cdbf8cddfbd7ffe206005172e5acc4bcfd125e88226bab5a60334572a0722167eb93b7f4d73e7b7b364b8
SSDEEP

1536:ecB5LC+IF7VPfLhS4eq/PblCVouzRh/DWb+7xAib8CCRhl5glvNtr:ecBEpPg6zkVouz7Da+2ib8CCRP56L

Score

5^/10

Drops file in System32 directory 4 IoCs

Processes:

rundll32.exe

description	ioc	process
File opened for modification	C:\Windows\system32\LogFiles\deploymentcsps\setuperr.log	rundll32.exe
File opened for modification	C:\Windows\system32\LogFiles\deploymentcsps\diagerr.xml	rundll32.exe
File opened for modification	C:\Windows\system32\LogFiles\deploymentcsps\diagwrn.xml	rundll32.exe
File opened for modification	C:\Windows\system32\LogFiles\deploymentcsps\setupact.log	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\__x64___setup___x32__\AppxSip\deploymentcsps.dll,#1
1⤵
- Drops file in System32 directory
PID:3408