b70c2091022d4d4c4c2bb52ad31fd67c9f8ced8277fc2012e08baf26af5e98e9 | Triage™

Analysis

max time kernel
114s
max time network
115s
platform
windows10_x64
resource
win10v20201028
submitted
09/01/2021, 08:52

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
63edc9cc91da7f221f0aec2c8e5a178d.dll
Size 336KB
Sample210109-vj52ydfpsa
SHA256 b70c2091022d4d4c4c2bb52ad31fd67c9f8ced8277fc2012e08baf26af5e98e9
MD5 63edc9cc91da7f221f0aec2c8e5a178d
SHA1 4fa9cf598754610323935ba59b95ecc6394bd7f4
SHA512 39061a588c2d4b8823b285e45a650ae24088021bed0c5e8a5898d6ace07fbf55b2eed42ee618286ad02ca198aa8a82f36df15ef00e0b7bbcc561cf93077c8c72
MD5 SHA1 SHA512

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 492 wrote to memory of 896	492	rundll32.exe	69
PID 492 wrote to memory of 896	492	rundll32.exe	69
PID 492 wrote to memory of 896	492	rundll32.exe	69

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\63edc9cc91da7f221f0aec2c8e5a178d.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:492
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\63edc9cc91da7f221f0aec2c8e5a178d.dll,#1
  2⤵
  PID:896

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads