e5b375e6bd13f3bcc93e3f8687dca2ee2a77adeb8e445d2758a6db3259d3834c | Triage™

Analysis

max time kernel
15s
max time network
115s
platform
windows10_x64
resource
win10
submitted
07/10/2020, 04:32

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
659ec382d8f4ae09f173688c60d0634d.dll
Size 429KB
Sample201007-zmp8xtazgs
SHA256 e5b375e6bd13f3bcc93e3f8687dca2ee2a77adeb8e445d2758a6db3259d3834c
MD5 659ec382d8f4ae09f173688c60d0634d
SHA1 4c1e05c99ce1d36cc16a243beaa1dfc54f6787f9
SHA512 2153bc19493f5084e804ce0a05e314033f4aeab02aff9db5578e14278855b08a0cd6e49708d628f278f1f6a1a9f3626c7dea3ef09cfdd9eb4a85cfdce548809a
MD5 SHA1 SHA512

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 3788 wrote to memory of 3852	3788	rundll32.exe	67
PID 3788 wrote to memory of 3852	3788	rundll32.exe	67
PID 3788 wrote to memory of 3852	3788	rundll32.exe	67

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\659ec382d8f4ae09f173688c60d0634d.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:3788
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\659ec382d8f4ae09f173688c60d0634d.dll,#1
  2⤵
  PID:3852

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads