91a8d66f5c1f651e0f60c456fa8dd06347f69be8ba5542f9c6781e6714962fa9 | Triage

Analysis

max time kernel
12s
max time network
125s
platform
windows10_x64
resource
win10v20210410
submitted
30-07-2021 09:06

Sharing

Report Analysis Logs

General

Target

atl100.dll
Size

134KB
MD5

c85670ab64068f8080998aeba6c5019c
SHA1

ef762c375486594f6604f39311d32442156ac8bb
SHA256

87d88235f69c062e5b759f91253abaf7bd055937dd119bd26858237f812d3ded
SHA512

870a27585f72e444fa9a2b46ab53ed420932952be8a3c4ddd0d831d72be0ac1b44992cf757de76d0cd667cd5b6150e9eb96ac2a8e7161a22c7d557946a12e5c6

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

Processes:

rundll32.exe

description	pid	process	target process
PID 3952 wrote to memory of 3640	3952	rundll32.exe	rundll32.exe
PID 3952 wrote to memory of 3640	3952	rundll32.exe	rundll32.exe
PID 3952 wrote to memory of 3640	3952	rundll32.exe	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\atl100.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:3952

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\atl100.dll,#1
2⤵
PID:3640

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3640-114-0x0000000000000000-mapping.dmp

Download