ba4f2e2acb912e9006c48b172fc3ea202b12371caad71b161dbddbad435a1fbf | Triage™

Analysis

max time kernel
122s
max time network
122s
platform
windows10_x64
resource
win10
submitted
02/10/2020, 21:39

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
ba4f2e2acb912e9006c48b172fc3ea202b12371caad71b161dbddbad435a1fbf.dll
Size 204KB
Sample201002-9ysm9lcksn
SHA256 ba4f2e2acb912e9006c48b172fc3ea202b12371caad71b161dbddbad435a1fbf
MD5 49225ec84272c2a816082cf517dafe4f
SHA1 840639160139461e4b845cca547030536de78f2f
SHA512 79a6241d56d9c72c8d0c9f997472412c96c280bfe2b42d03d298e970bd7a5ed3796f4eeca983b2314f48c9aec384117b68395d975ef4570b3f2082525a46e780
MD5 SHA1 SHA512

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 720 wrote to memory of 364	720	rundll32.exe	67
PID 720 wrote to memory of 364	720	rundll32.exe	67
PID 720 wrote to memory of 364	720	rundll32.exe	67

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\ba4f2e2acb912e9006c48b172fc3ea202b12371caad71b161dbddbad435a1fbf.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:720
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\ba4f2e2acb912e9006c48b172fc3ea202b12371caad71b161dbddbad435a1fbf.dll,#1
  2⤵
  PID:364

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads