9fd92b2633147d58a5d4a28d1f5f66a11873c4185c44429295cda9956defa6d4 | Triage

Analysis

max time kernel
136s
max time network
143s
platform
windows10-2004_x64
resource
win10v2004-en-20220113
submitted
14-04-2022 15:00

Sharing

Report Analysis Logs

General

Target

2_Attachments.dll
Size

2.2MB
MD5

555b77d23549e231c8d7f0b003cc5164
SHA1

afde458ab0294f206a5cf832ce4e73661b0308f8
SHA256

9fd92b2633147d58a5d4a28d1f5f66a11873c4185c44429295cda9956defa6d4
SHA512

a2d918e62fa320e73649099d3e15aa9790b39e878c965487e4621d5851d3d867f3b650470849e5518b40f99db0cbf9030807df59b476db266e5ae21b48d65384

Score

8^/10

Malware Config

Signatures

Blocklisted process makes network request 12 IoCs

Processes:

rundll32.exe

flow	pid	process
7	1488	rundll32.exe
8	1488	rundll32.exe
18	1488	rundll32.exe
19	1488	rundll32.exe
39	1488	rundll32.exe
40	1488	rundll32.exe
42	1488	rundll32.exe
43	1488	rundll32.exe
44	1488	rundll32.exe
45	1488	rundll32.exe
54	1488	rundll32.exe
55	1488	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2_Attachments.dll,#1
1⤵
- Blocklisted process makes network request
PID:1488

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1488-130-0x00007FFC4C780000-0x00007FFC4C790000-memory.dmp

Filesize
64KB

Download