Overview

overview

8

Static

static

8

12.dll

windows7_x64

1

12.dll

windows10_x64

1

exe.exe

windows7_x64

3

exe.exe

windows10_x64

3

libeay32.dll

windows7_x64

1

libeay32.dll

windows10_x64

1

sql.dll

windows7_x64

3

sql.dll

windows10_x64

3

ssleay32.dll

windows7_x64

1

ssleay32.dll

windows10_x64

1

Analysis

  • max time kernel
    123s
  • max time network
    149s
  • platform
    windows10_x64
  • resource
    win10-en-20211208
  • submitted
    28-01-2022 19:44

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    12.dll

  • Size

    10.0MB

  • MD5

    1e831147b9f62a62ff1fcda164a1fcef

  • SHA1

    81a15c51e58f7d9ef4c00e7e28420b1cebeb2a33

  • SHA256

    a89985ef9618bfaace36a65d16ed72038129f4111883f454aea22161341cba18

  • SHA512

    d90dc9db07f2126543a5cfbea968acb8b51769b463fd6bcc6fb99f0a1428066221970b4171cf92c3668025e3b088d7a7a7f945af73f9286dcec69fa9d53fd7f8

Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\12.dll,#1
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1324
    • C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\12.dll,#1
      2⤵
        PID:2556

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads