84332eb92ad2cde1781383cc6b3923cf31027be28594be5567135e117b64be93 | Triage

Analysis

max time kernel
120s
max time network
149s
platform
windows10_x64
resource
win10-en-20211208
submitted
29-01-2022 21:50

Sharing

Report Analysis Logs

General

Target

84332eb92ad2cde1781383cc6b3923cf31027be28594be5567135e117b64be93.dll
Size

67KB
MD5

b5dcd230c70b652c7af3e636aea6bbb8
SHA1

5e9a782544550e26ec37155df9852d143efeb59b
SHA256

84332eb92ad2cde1781383cc6b3923cf31027be28594be5567135e117b64be93
SHA512

54e687004c42cbc52e1aa7c6f9040dfdd85c8208cef1f1218b36a1edff94edbc152400750c60456c3b20902641945de48fe742f3ee8ae9385b91554931dc5f7d

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

Processes:

rundll32.exe

description	pid	process	target process
PID 3452 wrote to memory of 3548	3452	rundll32.exe	rundll32.exe
PID 3452 wrote to memory of 3548	3452	rundll32.exe	rundll32.exe
PID 3452 wrote to memory of 3548	3452	rundll32.exe	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\84332eb92ad2cde1781383cc6b3923cf31027be28594be5567135e117b64be93.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:3452

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\84332eb92ad2cde1781383cc6b3923cf31027be28594be5567135e117b64be93.dll,#1
2⤵
PID:3548

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads