Analysis

  • max time kernel
    303s
  • max time network
    361s
  • platform
    windows10_x64
  • resource
    win10-en-20211104
  • submitted
    05/11/2021, 10:04

General

  • Target
    PencilCry.exe
  • Size 658KB
  • Sample211105-l4chaagebr
  • SHA256 77ec792277dc21124e9db5776d3a36a4a65edc1f8d2ab5b0a7af19db051e4381
  • MD5 SHA1 SHA512
Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\PencilCry.exe
    "C:\Users\Admin\AppData\Local\Temp\PencilCry.exe"
    1⤵
      PID:3804
    • C:\Windows\System32\rundll32.exe
      C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
      1⤵
        PID:2780

      Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            memory/3804-118-0x0000000000A30000-0x0000000000A31000-memory.dmp

            memory/3804-120-0x0000000005A00000-0x0000000005A01000-memory.dmp

            memory/3804-121-0x0000000005500000-0x0000000005501000-memory.dmp

            memory/3804-122-0x00000000055C0000-0x00000000055C1000-memory.dmp

            memory/3804-123-0x0000000005500000-0x00000000059FE000-memory.dmp

            memory/3804-124-0x0000000005500000-0x00000000059FE000-memory.dmp