Analysis

  • max time kernel
    131s
  • max time network
    135s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-en-20220113
  • submitted
    08-04-2022 19:00

General

  • Target

    0055433d0ad98365cbaba95f462953bc0d8dcfe813005d5efb43c569abc69ac8.dll

  • Size

    1.7MB

  • MD5

    94faab5bb36e576d46c1466e820b9fdd

  • SHA1

    6488a57a83b8342c8c544eecc7cebe82e3213f93

  • SHA256

    0055433d0ad98365cbaba95f462953bc0d8dcfe813005d5efb43c569abc69ac8

  • SHA512

    14614ae97be5bb36c5981d293e265fe7a73e32521da34e23f72cb715337f22e95ffd2826a20ecaa522dbf418ae6ccfaa4713b6f2f2e60e04222d998f68db3520

Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\0055433d0ad98365cbaba95f462953bc0d8dcfe813005d5efb43c569abc69ac8.dll,#1
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1160
    • C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\0055433d0ad98365cbaba95f462953bc0d8dcfe813005d5efb43c569abc69ac8.dll,#1
      2⤵
        PID:1728

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1728-130-0x0000000000000000-mapping.dmp