0a529a4059586c60a025c4f646c6ca443488a39263f5f21b897fe7f9373602e8 | Triage

Analysis

max time kernel
11s
max time network
30s
platform
windows10-2004_x64
resource
win10v2004-en-20220113
submitted
05-02-2022 19:43

Sharing

Report Analysis Logs

General

Target

0a529a4059586c60a025c4f646c6ca443488a39263f5f21b897fe7f9373602e8.dll
Size

854KB
MD5

19e408f81cf26358f32010d0e8de00df
SHA1

31361849ff0cc6b9fecc7489462bb683d0f2af49
SHA256

0a529a4059586c60a025c4f646c6ca443488a39263f5f21b897fe7f9373602e8
SHA512

55be375f7a50d5ba319a9919ba7faf7f847c1e9164c973ddc77a504fbda9569e3c911c566e8719f3b237753bee41757477db20b6cd413953c356862a0a621220

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

Processes:

rundll32.exe

description	pid	process	target process
PID 1904 wrote to memory of 1932	1904	rundll32.exe	rundll32.exe
PID 1904 wrote to memory of 1932	1904	rundll32.exe	rundll32.exe
PID 1904 wrote to memory of 1932	1904	rundll32.exe	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0a529a4059586c60a025c4f646c6ca443488a39263f5f21b897fe7f9373602e8.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:1904

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\0a529a4059586c60a025c4f646c6ca443488a39263f5f21b897fe7f9373602e8.dll,#1
2⤵
PID:1932

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...