7cbb379e78c7c547cfd1957ccaa0be899cb97df3d001605c9bd51cd70d975886 | Triage™

Analysis

max time kernel
131s
max time network
135s
platform
windows10-2004_x64
resource
win10v2004-en-20220113
submitted
21/03/2022, 07:57

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
readme.dll
Size 457KB
Sample220321-js9mjaadhj
SHA256 7cbb379e78c7c547cfd1957ccaa0be899cb97df3d001605c9bd51cd70d975886
MD5 b7419ae99bdf4bb0d53ac560e308565e
SHA1 f143fb4f0b339fecff40838b43a645fc0b056c5a
SHA512 5940a1ee8755021233d401e571180f43e6eee0fc14dc4c486394838789482dcac565f9c8c40a3375b1fa3e7717c83705bac776540d8f045ec867b7a24d3ea4c0
MD5 SHA1 SHA512

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1032 wrote to memory of 2108	1032	rundll32.exe	79
PID 1032 wrote to memory of 2108	1032	rundll32.exe	79
PID 1032 wrote to memory of 2108	1032	rundll32.exe	79

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\readme.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:1032
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\readme.dll,#1
  2⤵
  PID:2108

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads