42a1d2a7885898c85524a6b18550a9e01b86e5ad1c33af845b6ae1450ef69bfe | Triage™

Analysis

max time kernel
125s
max time network
137s
platform
windows10-2004_x64
resource
win10v2004-20220310-en
submitted
23/03/2022, 08:35

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
readme.dll
Size 654KB
Sample220323-khd9bafabk
SHA256 42a1d2a7885898c85524a6b18550a9e01b86e5ad1c33af845b6ae1450ef69bfe
MD5 f80d324c58330924265109d0074ebbf1
SHA1 fd4c4f7a3abb7b7e991fa4f3d908d5b59fc7376e
SHA512 9822ea03d5abada37becb9b441d05f36d788c6dddef82fc5f4a4f26c7db5d222e5b6373e45af31fca35c7692f348ce9e3451153afa764ec9c0914eef18cbf729
MD5 SHA1 SHA512

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 3896 wrote to memory of 4444	3896	rundll32.exe	83
PID 3896 wrote to memory of 4444	3896	rundll32.exe	83
PID 3896 wrote to memory of 4444	3896	rundll32.exe	83

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\readme.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:3896
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\readme.dll,#1
  2⤵
  PID:4444

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads