a07f03acb1bd6c83e7b79bbd2c28b672f533cc58b194a97b0c1f6002e54b4313 | Triage™

Analysis

max time kernel
65s
max time network
110s
platform
windows10_x64
resource
win10v20201028
submitted
09/11/2020, 19:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
0bb62d39a7241b58bfbcb200cb534ff7.dll
Size 863KB
Sample201109-snydytk3bj
SHA256 a07f03acb1bd6c83e7b79bbd2c28b672f533cc58b194a97b0c1f6002e54b4313
MD5 0bb62d39a7241b58bfbcb200cb534ff7
SHA1 44b82ea1bdbaf3c1c384816f2ab20e7c41a9792b
SHA512 fc80bde9b7c788ef6a948daf6db3fa41db668eda6c27a2677875e56c65eb2173a9e26318db939bc4e1bac9fe5d02cba6a8309ad21e58f790ce3baf4b731c9d0b
MD5 SHA1 SHA512

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2868 wrote to memory of 4008	2868	rundll32.exe	70
PID 2868 wrote to memory of 4008	2868	rundll32.exe	70
PID 2868 wrote to memory of 4008	2868	rundll32.exe	70

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0bb62d39a7241b58bfbcb200cb534ff7.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2868
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\0bb62d39a7241b58bfbcb200cb534ff7.dll,#1
  2⤵
  PID:4008

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads