dddf58d54c7e1b086fc575df30ed923766f2ab9c23ede70c1a109400886dd39f | Triage

Analysis

max time kernel
151s
max time network
159s
platform
windows10_x64
resource
win10-en-20211208
submitted
24-01-2022 00:52

Sharing

Report Analysis Logs

General

Target

dddf58d54c7e1b086fc575df30ed923766f2ab9c23ede70c1a109400886dd39f.dll
Size

164KB
MD5

75aab937577f6df274fab05ee2baf9f5
SHA1

bd0f79c02d8d2b6bf32e0b798b9397f7704b4648
SHA256

dddf58d54c7e1b086fc575df30ed923766f2ab9c23ede70c1a109400886dd39f
SHA512

f71ad7cdd1f226df19a6d4be4dfc2560512dddceb7e73dd9a119e7422aaadcf20eb21b685e3471af1f4b0fd106561351ef8c332b8a34abc1790a56634d259fea

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

Processes:

rundll32.exe

description	pid	process	target process
PID 2792 wrote to memory of 764	2792	rundll32.exe	rundll32.exe
PID 2792 wrote to memory of 764	2792	rundll32.exe	rundll32.exe
PID 2792 wrote to memory of 764	2792	rundll32.exe	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\dddf58d54c7e1b086fc575df30ed923766f2ab9c23ede70c1a109400886dd39f.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2792

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\dddf58d54c7e1b086fc575df30ed923766f2ab9c23ede70c1a109400886dd39f.dll,#1
2⤵
PID:764

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...