c54495e55e1b18bea4e6e36ab10dadb115db761a4255f7379f268eb9e28e96d4 | Triage™

Analysis

max time kernel
75s
max time network
149s
platform
windows10_x64
resource
win10v200722
submitted
03/08/2020, 18:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
ocxfutur.dll
Size 340KB
Sample200803-2sza9gfcse
SHA256 c54495e55e1b18bea4e6e36ab10dadb115db761a4255f7379f268eb9e28e96d4
MD5 252f580a1cd8c35c54f39c89c0929c08
SHA1 e168558c42bf7f19988aa247e63e3a50a3df930f
SHA512 294d9169b46a6aafc66c3305b2a5af6b7c898faabacee122a5f38ca0221a0b499a008c488e6f86561389b61e8269e38217a8dacc2a3e6a97d7374aa0c1f104dc
MD5 SHA1 SHA512

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 3908 wrote to memory of 3028	3908	rundll32.exe	66
PID 3908 wrote to memory of 3028	3908	rundll32.exe	66
PID 3908 wrote to memory of 3028	3908	rundll32.exe	66

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\ocxfutur.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:3908
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\ocxfutur.dll,#1
  2⤵
  PID:3028

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads