5b13bf414dd7fd3cd55d39ab5c6809a27f90de35318a0e415b94c2c0daea2bc4

Analysis

Score

5^/10

Drops file in System32 directory 2 IoCs

Processes:

rundll32.exe

description	ioc	Process
File opened for modification	C:\Windows\system32\rundll32.exe: $TASK	rundll32.exe
File opened for modification	C:\Windows\system32\rundll32.exe: $FILE	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\sample.dll,#1
1⤵
- Drops file in System32 directory
PID:848

C:\Windows\system32\rundll32.exe
C:\Windows\system32\rundll32.exe -u
1⤵
PID:1840