70dc0e275b2eeafaacf8416f1c996ab98513880be77e36fb07c2a5bdf4561d3b | Triage™

Analysis

max time kernel
123s
max time network
124s
platform
windows10_x64
resource
win10
submitted
17/07/2020, 06:42

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
ebcd0a0d92f5efef88196a9ca6e1936cf331d9789f4d8cca6506131fcf921cbf.dll
Size 74KB
Sample200717-ghp5pxmp8x
SHA256 70dc0e275b2eeafaacf8416f1c996ab98513880be77e36fb07c2a5bdf4561d3b
MD5 d0cb01251f107bb67fe449249ed195d2
SHA1 3f83f77d221bc0fe3ce4669bca1c6800736765e9
SHA512 0d1d513db3df86a73905cac92f186c026066ab61f2a84afa43f80e80096b72b5e222b700e05ac908cdbe1b60c03612aa13e0d70a5d32db31fae6047ae90d88ca
MD5 SHA1 SHA512

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 720 wrote to memory of 336	720	rundll32.exe	67
PID 720 wrote to memory of 336	720	rundll32.exe	67
PID 720 wrote to memory of 336	720	rundll32.exe	67

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\ebcd0a0d92f5efef88196a9ca6e1936cf331d9789f4d8cca6506131fcf921cbf.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:720
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\ebcd0a0d92f5efef88196a9ca6e1936cf331d9789f4d8cca6506131fcf921cbf.dll,#1
  2⤵
  PID:336

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads