Analysis

  • max time kernel
    117s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-en-20211208
  • submitted
    13-02-2022 22:33

General

  • Target

    0944f12d7f4a22a32861cc3e102aff14e3105e91f99d16e32efca811417c3bab.dll

  • Size

    196KB

  • MD5

    67ef55c53b9db71ee0288367fc7a226f

  • SHA1

    1686e2acce550535c389084adc3e37e2e3936d97

  • SHA256

    0944f12d7f4a22a32861cc3e102aff14e3105e91f99d16e32efca811417c3bab

  • SHA512

    472907cc5fa25ac8ab1ca3ed2a80985aa616f988502c0efb20b32f1fd41bb417508d77f82afc56e465621727d96de2629b7d1680e31b0204b7db3d8c450a268a

Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 7 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\0944f12d7f4a22a32861cc3e102aff14e3105e91f99d16e32efca811417c3bab.dll,#1
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1068
    • C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\0944f12d7f4a22a32861cc3e102aff14e3105e91f99d16e32efca811417c3bab.dll,#1
      2⤵
        PID:1088

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1088-54-0x0000000075341000-0x0000000075343000-memory.dmp

      Filesize

      8KB