Overview

overview

8

Static

static

8

12.dll

windows7_x64

1

12.dll

windows10_x64

1

exe.exe

windows7_x64

3

exe.exe

windows10_x64

3

libeay32.dll

windows7_x64

1

libeay32.dll

windows10_x64

1

sql.dll

windows7_x64

3

sql.dll

windows10_x64

3

ssleay32.dll

windows7_x64

1

ssleay32.dll

windows10_x64

1

Analysis

  • max time kernel
    120s
  • max time network
    161s
  • platform
    windows10_x64
  • resource
    win10-en-20211208
  • submitted
    28-01-2022 17:39

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    ssleay32.dll

  • Size

    349KB

  • MD5

    cf2c57dda3766c204c398430da23693d

  • SHA1

    9938cbf4b5e7cffa0d73825a6ef85b0d90a0ce0a

  • SHA256

    492f045643354c8b9fa11673b6c32cdbb33779826a729ce55de5901279c1f6d5

  • SHA512

    e83e33b5bc9161351daaaae8e9130d83568d85b4a4ab190730e9558ddad199091f5b3acb3e1060dad5ec840a74f8b6781a086f49b7a1ecb6f82fc1cc265c536a

Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\ssleay32.dll,#1
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:4044
    • C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\ssleay32.dll,#1
      2⤵
        PID:4052

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads