f0d923f147d65e191df660c5d593e77599dfe95abf43db404da704012056262b | Triage™

Analysis

max time kernel
117s
max time network
149s
platform
windows10_x64
resource
win10-en-20211208
submitted
16/12/2021, 08:58

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
c7e352f3f702bc5a54c13963f2a6e4c0.dll
Size 525KB
Sample211216-kw669abfc6
SHA256 f0d923f147d65e191df660c5d593e77599dfe95abf43db404da704012056262b
MD5 c7e352f3f702bc5a54c13963f2a6e4c0
SHA1 f06aefdefd603a6a5e8c64c2bb52fb6018736c55
SHA512 9b5a9068146a9963256ffaf6f5c97a800a0538a3f48974be7bf1d12a29217e4d014f673b9288cc41952b390074607a3f23b8b170b37f6d3cd289fa5da7ff35b5
MD5 SHA1 SHA512

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 692 wrote to memory of 2408	692	rundll32.exe	69
PID 692 wrote to memory of 2408	692	rundll32.exe	69
PID 692 wrote to memory of 2408	692	rundll32.exe	69

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\c7e352f3f702bc5a54c13963f2a6e4c0.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:692
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\c7e352f3f702bc5a54c13963f2a6e4c0.dll,#1
  2⤵
  PID:2408

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads