Analysis
-
max time kernel
37s -
max time network
41s -
platform
windows7_x64 -
resource
win7-20220414-en -
submitted
03-05-2022 13:44
Static task
static1
Behavioral task
behavioral1
Sample
7cd77b460f3f433c3256658a37368bb363e5c5b6a02e048e0646163f04560d97.dll
Resource
win7-20220414-en
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
7cd77b460f3f433c3256658a37368bb363e5c5b6a02e048e0646163f04560d97.dll
Resource
win10v2004-20220414-en
0 signatures
0 seconds
General
-
Target
7cd77b460f3f433c3256658a37368bb363e5c5b6a02e048e0646163f04560d97.dll
-
Size
173KB
-
MD5
2dda307ec1f222b8a00821c96537d860
-
SHA1
4b1a9e9fbebfcf464ffb638c67f14787a18bae97
-
SHA256
7cd77b460f3f433c3256658a37368bb363e5c5b6a02e048e0646163f04560d97
-
SHA512
0495e219d70bfbc47bacd53ef28fbb385c2230018820116ff45f8d70fb8a29ff9eda80137dfb1999879a19f249c1bf77e1da68e695438c18fddaec7ead0470b7
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 7 IoCs
Processes:
rundll32.exedescription pid process target process PID 972 wrote to memory of 1704 972 rundll32.exe rundll32.exe PID 972 wrote to memory of 1704 972 rundll32.exe rundll32.exe PID 972 wrote to memory of 1704 972 rundll32.exe rundll32.exe PID 972 wrote to memory of 1704 972 rundll32.exe rundll32.exe PID 972 wrote to memory of 1704 972 rundll32.exe rundll32.exe PID 972 wrote to memory of 1704 972 rundll32.exe rundll32.exe PID 972 wrote to memory of 1704 972 rundll32.exe rundll32.exe
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\7cd77b460f3f433c3256658a37368bb363e5c5b6a02e048e0646163f04560d97.dll,#11⤵
- Suspicious use of WriteProcessMemory
PID:972 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\7cd77b460f3f433c3256658a37368bb363e5c5b6a02e048e0646163f04560d97.dll,#12⤵PID:1704