a23aa326c7f2f0d829c322f586476c6a3b727a512f68903ca4410237732f793f | Triage

Analysis

max time kernel
18s
max time network
112s
platform
windows10_x64
resource
win10v20201028
submitted
10-01-2021 01:04

Sharing

Report Analysis Logs

General

Target

ply606.bin.dll
Size

549KB
MD5

b32892d699c39949e9b648d6b72fe5cf
SHA1

b67048acde6f73e76a5004331130824fa810670e
SHA256

0201b92d3d877df4de0d109ce6f3d647cfde3ab9d881f8cddc10d4bb8e5f21ad
SHA512

6c73cd30febac92a59785bac5b13d25b5485e9e0e16ec82e6053f5ec6e342f42dd0273dd8548630946594816bc9bb7af18e6a87f15afa07cb5106d6df9f966b6

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2432 wrote to memory of 1048	2432	rundll32.exe	70
PID 2432 wrote to memory of 1048	2432	rundll32.exe	70
PID 2432 wrote to memory of 1048	2432	rundll32.exe	70

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\ply606.bin.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2432
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\ply606.bin.dll,#1
  2⤵
  PID:1048

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads