Analysis

  • max time kernel
    23s
  • max time network
    28s
  • platform
    windows7_x64
  • resource
    win7v20201028
  • submitted
    23-02-2021 12:43

General

  • Target

    72159165863a368167f8d5b22a2f7c24c4b68496d66e99ffe72d3a7aba8b5eb5.dll

  • Size

    184KB

  • MD5

    5d2a5c3fe3c52c6310b0f9e191a34f7b

  • SHA1

    35bcf8d96af0e422dfd4bbf11e036eb74d715df8

  • SHA256

    72159165863a368167f8d5b22a2f7c24c4b68496d66e99ffe72d3a7aba8b5eb5

  • SHA512

    247c787b7d66925a670b3385c2ce9b44b29f957894ecc270a92d91e274e03e6e929a715a748c6dfd1825eae0ff20599465adee62de6788810f91681c32cfc69d

Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 7 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\72159165863a368167f8d5b22a2f7c24c4b68496d66e99ffe72d3a7aba8b5eb5.dll,#1
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:892
    • C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\72159165863a368167f8d5b22a2f7c24c4b68496d66e99ffe72d3a7aba8b5eb5.dll,#1
      2⤵
        PID:1852

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1852-2-0x0000000000000000-mapping.dmp
    • memory/1852-3-0x0000000074D91000-0x0000000074D93000-memory.dmp
      Filesize

      8KB