49e3354652b992abb8353ece9f3116040bf63bfcff52027be7781369a12d13aa

Analysis

Score

5^/10

Drops file in System32 directory 2 IoCs

Processes:

rundll32.exe

description	ioc	process
File opened for modification	C:\Windows\system32\rundll32.exe: $TASK	rundll32.exe
File opened for modification	C:\Windows\system32\rundll32.exe: $FILE	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\sample.dll,#1
1⤵
- Drops file in System32 directory
PID:1048

C:\Windows\system32\rundll32.exe
C:\Windows\system32\rundll32.exe -u
1⤵
PID:1972