8423fefddbb9197ebe12a5e51fb8f06e6dc2c02d6ef68b254faba0d6a63866c5 | Triage

Analysis

max time kernel
127s
max time network
150s
platform
windows10_x64
resource
win10v200430
submitted
07/07/2020, 12:18

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

crypt_da11.dll
Size

384KB
MD5

733f96559b76b9d84655bc56d4719f1e
SHA1

7cf17af35ec4733292694ed3c34d6ad2aa4a8fb1
SHA256

8423fefddbb9197ebe12a5e51fb8f06e6dc2c02d6ef68b254faba0d6a63866c5
SHA512

e23d5e1c05c9a761281ad9236310ce2a98d54dd9af56e9ff261696d85729838755a7bc00bc3057e9b8aa037d519317f9a4ce1af4b9528ae33005ec2db3473eba

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1612 wrote to memory of 1684	1612	rundll32.exe	68
PID 1612 wrote to memory of 1684	1612	rundll32.exe	68
PID 1612 wrote to memory of 1684	1612	rundll32.exe	68

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\crypt_da11.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:1612
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\crypt_da11.dll,#1
  2⤵
  PID:1684

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads