Analysis

  • max time kernel
    157s
  • max time network
    180s
  • platform
    windows10_x64
  • resource
    win10-en-20211014
  • submitted
    13-11-2021 17:35

General

  • Target

    2532083859417ec55d85a2412a678c2ff3219d473e6abfca158e4bc75ef8c8b9.dll

  • Size

    64KB

  • MD5

    f9e519f958184c4e2150c7828bb1efea

  • SHA1

    cc64a670ded14c941ae690f59c47fa2abe3858c1

  • SHA256

    2532083859417ec55d85a2412a678c2ff3219d473e6abfca158e4bc75ef8c8b9

  • SHA512

    eb3d690a61f90908605780042acaf21d32c0a37973a0c74da5ad27b64fa99f9905a95e7b2cc33d1e553739d3d30e684d7f246201b335947ff65351d3ff4f4ec4

Score
8/10

Malware Config

Signatures

  • Blocklisted process makes network request 5 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\2532083859417ec55d85a2412a678c2ff3219d473e6abfca158e4bc75ef8c8b9.dll,#1
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:4272
    • C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\2532083859417ec55d85a2412a678c2ff3219d473e6abfca158e4bc75ef8c8b9.dll,#1
      2⤵
      • Blocklisted process makes network request
      PID:4312

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads