Analysis
-
max time kernel
8s -
max time network
16s -
platform
windows7_x64 -
resource
win7v20201028 -
submitted
15-03-2021 23:08
General
-
Target
krnln.fnr.dll
-
Size
1.1MB
-
MD5
638e737b2293cf7b1f14c0b4fb1f3289
-
SHA1
f8e2223348433b992a8c42c4a7a9fb4b5c1158bc
-
SHA256
baad4798c3ab24dec8f0ac3cde48e2fee2e2dffa60d2b2497cd295cd6319fd5b
-
SHA512
4d714a0980238c49af10376ff26ec9e6415e7057925b32ec1c24780c3671047ac5b5670e46c1c6cf9f160519be8f37e1e57f05c30c6c4bda3b275b143aa0bf12
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 7 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\krnln.fnr.dll,#11⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\krnln.fnr.dll,#12⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/2020-2-0x0000000000000000-mapping.dmp
-
memory/2020-3-0x00000000767E1000-0x00000000767E3000-memory.dmpFilesize
8KB