Analysis

  • max time kernel
    3s
  • max time network
    9s
  • platform
    windows7_x64
  • resource
    win7v20201028
  • submitted
    23-02-2021 12:43

General

  • Target

    3c15e4affb118571ac18b9a1dc6c13bfddd6f4e24d7eed1c51a474f2e2f99294.dll

  • Size

    184KB

  • MD5

    7911566c3ba1ef6c3b04dd52b664d123

  • SHA1

    439868bdd2697558ed39d11e3d44aba3ce9aeab8

  • SHA256

    3c15e4affb118571ac18b9a1dc6c13bfddd6f4e24d7eed1c51a474f2e2f99294

  • SHA512

    16df0796ca1cfcd31f93886883b6ff1e7e4e1239cf44c04b263c2af9f21db38b3738ab3ecebb24f16794c4870c740f117f320c894defffafaa66a19f94a80b29

Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 7 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\3c15e4affb118571ac18b9a1dc6c13bfddd6f4e24d7eed1c51a474f2e2f99294.dll,#1
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1064
    • C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\3c15e4affb118571ac18b9a1dc6c13bfddd6f4e24d7eed1c51a474f2e2f99294.dll,#1
      2⤵
        PID:1768

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1768-2-0x0000000000000000-mapping.dmp
    • memory/1768-3-0x0000000076101000-0x0000000076103000-memory.dmp
      Filesize

      8KB