633764c63808ded9e32e596fdf188eed7d2fe3162c9a7cb568e8bbe764bd31a2 | Triage™

Analysis

max time kernel
12s
max time network
110s
platform
windows10_x64
resource
win10v20201028
submitted
11/11/2020, 09:23

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
c2f963b4c7f2073c06492f957f431f34.dll
Size 562KB
Sample201111-6mvkqv5pyx
SHA256 633764c63808ded9e32e596fdf188eed7d2fe3162c9a7cb568e8bbe764bd31a2
MD5 c2f963b4c7f2073c06492f957f431f34
SHA1 ef0f8880120ee9bf4bb531551a78bdfb80e996d5
SHA512 f7973e31f64d8c0c189978c4794064fa42723db4b42925268f62637eb7f6771bf89b33832411535ec9eea95f5b7085619fe4a1908272c9d473497b61eb42ef3a
MD5 SHA1 SHA512

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 644 wrote to memory of 60	644	rundll32.exe	69
PID 644 wrote to memory of 60	644	rundll32.exe	69
PID 644 wrote to memory of 60	644	rundll32.exe	69

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\c2f963b4c7f2073c06492f957f431f34.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:644
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\c2f963b4c7f2073c06492f957f431f34.dll,#1
  2⤵
  PID:60

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads