ed4a8e5b9bcb16eebf98c562e0f518c2d406502b8d2aece49c13a4aae8784695 | Triage™

Analysis

max time kernel
13s
max time network
110s
platform
windows10_x64
resource
win10v20201028
submitted
08/12/2020, 16:27

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
b6bc800afb48c44111de1eeeb153b18d.dll
Size 2.4MB
Sample201208-m13bbrbgcn
SHA256 ed4a8e5b9bcb16eebf98c562e0f518c2d406502b8d2aece49c13a4aae8784695
MD5 b6bc800afb48c44111de1eeeb153b18d
SHA1 cb79a5ae115ea730adfec0573a9c96e753bd4c08
SHA512 cdc417cae648ed2d692d9508afc6b1ca065b1682e66eae8610b9e36307eeea07865caa6e167c31252dceb1aded91705a718cbc20947fe45ec6b47152ed05824d
MD5 SHA1 SHA512

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 576 wrote to memory of 352	576	rundll32.exe	69
PID 576 wrote to memory of 352	576	rundll32.exe	69
PID 576 wrote to memory of 352	576	rundll32.exe	69

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\b6bc800afb48c44111de1eeeb153b18d.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:576
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\b6bc800afb48c44111de1eeeb153b18d.dll,#1
  2⤵
  PID:352

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads