Resubmissions

20-01-2022 18:23

220120-w1n21sbaf6 1

03-11-2021 12:18

211103-pgmaradga4 10

Analysis

  • max time kernel
    107s
  • max time network
    127s
  • platform
    windows10_x64
  • resource
    win10-en-20211014
  • submitted
    03-11-2021 12:18

General

  • Target

    5e3907e9e2ed8ff12bb4e96b52401d871526c5ed502d2149dd4f680da4925590.dll

  • Size

    2.3MB

  • MD5

    8edfa086de4dfdc93c0551bbb08cd5a8

  • SHA1

    4b1b5bed35bc676e835de14ee033339d37f4549d

  • SHA256

    5e3907e9e2ed8ff12bb4e96b52401d871526c5ed502d2149dd4f680da4925590

  • SHA512

    c91371d98116c58c9f2728e53079708e423145da9e25384b9e5d69efa3a3c29614bde40eec66cb38c33a12c42bf9074af8d7f29fccc4974ad3d5e871aef89385

Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\5e3907e9e2ed8ff12bb4e96b52401d871526c5ed502d2149dd4f680da4925590.dll,#1
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2504
    • C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\5e3907e9e2ed8ff12bb4e96b52401d871526c5ed502d2149dd4f680da4925590.dll,#1
      2⤵
        PID:2660

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2660-115-0x0000000000000000-mapping.dmp