Analysis
-
max time kernel
148s -
max time network
147s -
platform
windows10_x64 -
resource
win10v200430 -
submitted
07-07-2020 05:47
Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Variant.Mikey.113443.16555.21901.dll
Resource
win7
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Variant.Mikey.113443.16555.21901.dll
Resource
win10v200430
0 signatures
0 seconds
General
-
Target
SecuriteInfo.com.Variant.Mikey.113443.16555.21901.dll
-
Size
85KB
-
MD5
677eaa5f64fe9320bd2612725abd061d
-
SHA1
d9aebef6403dbd292a610aaf4d8001203392847c
-
SHA256
51dd7240691df659de0d87a471894c450a4d949c82ae0f907f57bf3efea2651f
-
SHA512
9ac227de42eed292b8f355f8041819d5e317fc5bc0efc44714054f6f76f5e1c0f204c0d7aef9e70ed42c1cf1909fe02bacffc8863873075e781de5f6d9e7c6c0
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes:
rundll32.exedescription pid process target process PID 3932 wrote to memory of 2536 3932 rundll32.exe rundll32.exe PID 3932 wrote to memory of 2536 3932 rundll32.exe rundll32.exe PID 3932 wrote to memory of 2536 3932 rundll32.exe rundll32.exe
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Variant.Mikey.113443.16555.21901.dll,#11⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Variant.Mikey.113443.16555.21901.dll,#12⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/2536-0-0x0000000000000000-mapping.dmp