daa70a3c21659eae084f570aaa66fe194d4cbce337815b460c40ab744583c762 | Triage™

Analysis

max time kernel
121s
max time network
135s
platform
windows10_x64
resource
win10-en-20211208
submitted
24/01/2022, 00:54

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
daa70a3c21659eae084f570aaa66fe194d4cbce337815b460c40ab744583c762.dll
Size 116KB
Sample220124-a9k6tshadp
SHA256 daa70a3c21659eae084f570aaa66fe194d4cbce337815b460c40ab744583c762
MD5 86a99126b534c51795a43eaccb7f4534
SHA1 c53312e01ed58f665838a16a74fdcfb966e7a793
SHA512 06d4e5bb96ea6d23bb595128663104bc2deaeea390330a29466741c9a92767f8d78c4467f25cb6e74cceef737da8e53a859e9a713552c905aabd7ff7584e0b83
MD5 SHA1 SHA512

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2400 wrote to memory of 2232	2400	rundll32.exe	69
PID 2400 wrote to memory of 2232	2400	rundll32.exe	69
PID 2400 wrote to memory of 2232	2400	rundll32.exe	69

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\daa70a3c21659eae084f570aaa66fe194d4cbce337815b460c40ab744583c762.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2400
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\daa70a3c21659eae084f570aaa66fe194d4cbce337815b460c40ab744583c762.dll,#1
  2⤵
  PID:2232

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads