64073723bd96cd31469d3d9d3f7920be9a851ff460eaadaaf9bca3eab812bf2f | Triage

Analysis

max time kernel
13s
max time network
75s
platform
windows10_x64
resource
win10v20210408
submitted
21-07-2021 12:57

Sharing

Report Analysis Logs

General

Target

silentnight.exe.dll
Size

309KB
MD5

cca6fc3c35d4e12c7fd37303d2f05732
SHA1

f4664fb9793dd9e1ee3b90988dd5af44eb79e5d4
SHA256

64073723bd96cd31469d3d9d3f7920be9a851ff460eaadaaf9bca3eab812bf2f
SHA512

86f49cd6a0ae6a6840a58624fa2daa2fbfb33ccf96482e63aaa165a57bca0ab6e29b74c813da57d47df033faa8c9fa2dc39f99a6f024f53cb86a5aa78948ba68

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

Processes:

rundll32.exe

description	pid	process	target process
PID 652 wrote to memory of 1128	652	rundll32.exe	rundll32.exe
PID 652 wrote to memory of 1128	652	rundll32.exe	rundll32.exe
PID 652 wrote to memory of 1128	652	rundll32.exe	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\silentnight.exe.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:652

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\silentnight.exe.dll,#1
2⤵
PID:1128

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1128-114-0x0000000000000000-mapping.dmp

Download