daf5fb094685e539b734678789da31bb003a3e4000a29c651d6bf93483fdc021 | Triage™

Analysis

max time kernel
129s
max time network
44s
platform
windows10_x64
resource
win10v200430
submitted
13/07/2020, 14:48

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
file2.dll
Size 36KB
Sample200713-gc26pdstfn
SHA256 daf5fb094685e539b734678789da31bb003a3e4000a29c651d6bf93483fdc021
MD5 c39c2a20e5ebab0a4db1e58f192ecc5e
SHA1 b15bd3a54b07ff4cb42bdc1e9de98ca511488ecf
SHA512 3faacf3c433bf8cb05125f9a9e356ed070de5bec5a221d3a95a6db1a8628ebc5082c3e5785900c71c0c3cf1c866e8b5b893fe5c4d076b8787f372c2e88662ed5
MD5 SHA1 SHA512

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1500 wrote to memory of 1660	1500	rundll32.exe	68
PID 1500 wrote to memory of 1660	1500	rundll32.exe	68
PID 1500 wrote to memory of 1660	1500	rundll32.exe	68

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\file2.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:1500
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\file2.dll,#1
  2⤵
  PID:1660

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads