0daa82650712f2338803521969f7dc7deebba0e34c4797a9e39d99595d7eb423
Classification: Malicious
0daa82650712f2338803521969f7dc7deebba0e34c4797a9e39d99595d7eb423 is a malicious file sample (Windows executable, 37.0 KB). 13 sightings, last seen 2026-08-16.
Detection summary
- 0 antivirus detections
- 0 IDS alerts
- 97 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Intrusion sets: THREAT GROUP-3390 (G0027)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Generic Malware | Cyber Threat Alliance | 2026-08-16 10:11:11 | 2026-08-16 10:11:11 | malicious-activity | |
| Generic Malware | Hybrid-Analysis | 2024-12-30 03:15:04 | 2024-12-30 05:15:11 | ||
| Emissary Panda | Maltiverse | 2023-03-02 04:14:48 | 2023-03-03 14:34:17 | malicious-activity | G0027 Threat Group-3390 |
Tags
apt spyware trojanSample information
- Filenames
- 0daa82650712f2338803521969f7dc7deebba0e34c4797a9e39d99595d7eb423
- File type
- PE32 executable (DLL) (GUI) Intel 80386, for MS Wi ...
- Size
- 37888 bytes
- MD5
31f37110828c87e2a0db57ffb04045c7- SHA-1
131fca0af9a557792beb9b7098bd331de2ebba0b- SHA-256
0daa82650712f2338803521969f7dc7deebba0e34c4797a9e39d99595d7eb423- First indexed
- 2023-03-03 14:34:17
- Last updated
- 2024-12-30 05:15:11
Process list
| Name | Command line |
|---|---|
| <Ignored Process> | |
| rundll32.exe | "C:\0daa82650712f2338803521969f7dc7deebba0e34c4797a9e39d99595d7eb423.dll",#1 |
| WerFault.exe | -u -p 3488 -s 204 |
| rundll32.exe | "C:\0daa82650712f2338803521969f7dc7deebba0e34c4797a9e39d99595d7eb423.dll",#2 |
| WerFault.exe | -u -p 5840 -s 216 |
| rundll32.exe | "C:\0daa82650712f2338803521969f7dc7deebba0e34c4797a9e39d99595d7eb423.dll",#3 |
| WerFault.exe | -u -p 5932 -s 216 |
| rundll32.exe | "C:\0daa82650712f2338803521969f7dc7deebba0e34c4797a9e39d99595d7eb423.dll",#4 |
| WerFault.exe | -u -p 5852 -s 216 |
| WerFault.exe | -u -p 3488 -s 204 |
| WerFault.exe | -u -p 5932 -s 216 |
| WerFault.exe | -u -p 5840 -s 216 |
| WerFault.exe | -u -p 5852 -s 216 |
| rundll32.exe | "C:\0daa82650712f2338803521969f7dc7deebba0e34c4797a9e39d99595d7eb423.dll",#5 |
| WerFault.exe | -u -p 5496 -s 204 |
| WerFault.exe | -u -p 5496 -s 204 |
| rundll32.exe | "C:\0daa82650712f2338803521969f7dc7deebba0e34c4797a9e39d99595d7eb423.dll",#6 |
| WerFault.exe | -u -p 4600 -s 204 |
| rundll32.exe | "C:\0daa82650712f2338803521969f7dc7deebba0e34c4797a9e39d99595d7eb423.dll",#7 |
| WerFault.exe | -u -p 3660 -s 216 |
| rundll32.exe | "C:\0daa82650712f2338803521969f7dc7deebba0e34c4797a9e39d99595d7eb423.dll",#8 |
| WerFault.exe | -u -p 4552 -s 216 |
| WerFault.exe | -u -p 4600 -s 204 |
| WerFault.exe | -u -p 3660 -s 216 |
| WerFault.exe | -u -p 4552 -s 216 |
| rundll32.exe | "C:\0daa82650712f2338803521969f7dc7deebba0e34c4797a9e39d99595d7eb423.dll",#9 |
| WerFault.exe | -u -p 780 -s 204 |
| WerFault.exe | -u -p 780 -s 204 |
| rundll32.exe | "C:\0daa82650712f2338803521969f7dc7deebba0e34c4797a9e39d99595d7eb423.dll",#10 |
| WerFault.exe | -u -p 2124 -s 216 |