Analysis

  • max time kernel
    50s
  • max time network
    67s
  • platform
    windows10_x64
  • resource
    win10-20220414-en
  • submitted
    27-05-2022 06:12

General

  • Target

    c65b7afb05ee2b2687e6280594019068c3d3829182dfe8604ce4adf2116cc46e.dll

  • Size

    1.9MB

  • MD5

    f67d08e8c02574cbc2f1122c53bfb976

  • SHA1

    6522992957e7e4d074947cad63189f308a80fcf2

  • SHA256

    c65b7afb05ee2b2687e6280594019068c3d3829182dfe8604ce4adf2116cc46e

  • SHA512

    2e9d0a211d2b085514f181852fae6e7ca6aed4d29f396348bedb59c556e39621810a9a74671566a49e126ec73a60d0f781fa9085eb407df1eefd942c18853be5

Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\c65b7afb05ee2b2687e6280594019068c3d3829182dfe8604ce4adf2116cc46e.dll,#1
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1964
    • C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\c65b7afb05ee2b2687e6280594019068c3d3829182dfe8604ce4adf2116cc46e.dll,#1
      2⤵
        PID:3652

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/3652-117-0x0000000000000000-mapping.dmp

    • memory/3652-118-0x0000000076EE0000-0x000000007706E000-memory.dmp

      Filesize

      1.6MB

    • memory/3652-119-0x0000000076EE0000-0x000000007706E000-memory.dmp

      Filesize

      1.6MB

    • memory/3652-120-0x0000000076EE0000-0x000000007706E000-memory.dmp

      Filesize

      1.6MB

    • memory/3652-121-0x0000000076EE0000-0x000000007706E000-memory.dmp

      Filesize

      1.6MB

    • memory/3652-122-0x0000000076EE0000-0x000000007706E000-memory.dmp

      Filesize

      1.6MB

    • memory/3652-123-0x0000000076EE0000-0x000000007706E000-memory.dmp

      Filesize

      1.6MB

    • memory/3652-124-0x0000000076EE0000-0x000000007706E000-memory.dmp

      Filesize

      1.6MB

    • memory/3652-125-0x0000000076EE0000-0x000000007706E000-memory.dmp

      Filesize

      1.6MB

    • memory/3652-126-0x0000000076EE0000-0x000000007706E000-memory.dmp

      Filesize

      1.6MB

    • memory/3652-127-0x0000000076EE0000-0x000000007706E000-memory.dmp

      Filesize

      1.6MB

    • memory/3652-128-0x0000000076EE0000-0x000000007706E000-memory.dmp

      Filesize

      1.6MB

    • memory/3652-129-0x0000000076EE0000-0x000000007706E000-memory.dmp

      Filesize

      1.6MB

    • memory/3652-130-0x0000000076EE0000-0x000000007706E000-memory.dmp

      Filesize

      1.6MB

    • memory/3652-131-0x0000000076EE0000-0x000000007706E000-memory.dmp

      Filesize

      1.6MB

    • memory/3652-132-0x0000000076EE0000-0x000000007706E000-memory.dmp

      Filesize

      1.6MB

    • memory/3652-133-0x0000000076EE0000-0x000000007706E000-memory.dmp

      Filesize

      1.6MB

    • memory/3652-135-0x0000000076EE0000-0x000000007706E000-memory.dmp

      Filesize

      1.6MB

    • memory/3652-136-0x0000000076EE0000-0x000000007706E000-memory.dmp

      Filesize

      1.6MB

    • memory/3652-134-0x0000000076EE0000-0x000000007706E000-memory.dmp

      Filesize

      1.6MB

    • memory/3652-137-0x0000000076EE0000-0x000000007706E000-memory.dmp

      Filesize

      1.6MB

    • memory/3652-138-0x0000000076EE0000-0x000000007706E000-memory.dmp

      Filesize

      1.6MB

    • memory/3652-139-0x0000000076EE0000-0x000000007706E000-memory.dmp

      Filesize

      1.6MB

    • memory/3652-140-0x0000000076EE0000-0x000000007706E000-memory.dmp

      Filesize

      1.6MB

    • memory/3652-141-0x0000000076EE0000-0x000000007706E000-memory.dmp

      Filesize

      1.6MB

    • memory/3652-142-0x0000000076EE0000-0x000000007706E000-memory.dmp

      Filesize

      1.6MB

    • memory/3652-143-0x0000000076EE0000-0x000000007706E000-memory.dmp

      Filesize

      1.6MB

    • memory/3652-144-0x0000000076EE0000-0x000000007706E000-memory.dmp

      Filesize

      1.6MB

    • memory/3652-145-0x0000000076EE0000-0x000000007706E000-memory.dmp

      Filesize

      1.6MB

    • memory/3652-146-0x0000000076EE0000-0x000000007706E000-memory.dmp

      Filesize

      1.6MB

    • memory/3652-147-0x0000000076EE0000-0x000000007706E000-memory.dmp

      Filesize

      1.6MB

    • memory/3652-148-0x0000000076EE0000-0x000000007706E000-memory.dmp

      Filesize

      1.6MB

    • memory/3652-149-0x0000000076EE0000-0x000000007706E000-memory.dmp

      Filesize

      1.6MB

    • memory/3652-150-0x0000000076EE0000-0x000000007706E000-memory.dmp

      Filesize

      1.6MB

    • memory/3652-151-0x0000000076EE0000-0x000000007706E000-memory.dmp

      Filesize

      1.6MB

    • memory/3652-152-0x0000000076EE0000-0x000000007706E000-memory.dmp

      Filesize

      1.6MB

    • memory/3652-153-0x0000000076EE0000-0x000000007706E000-memory.dmp

      Filesize

      1.6MB

    • memory/3652-154-0x0000000076EE0000-0x000000007706E000-memory.dmp

      Filesize

      1.6MB

    • memory/3652-155-0x0000000076EE0000-0x000000007706E000-memory.dmp

      Filesize

      1.6MB

    • memory/3652-156-0x0000000076EE0000-0x000000007706E000-memory.dmp

      Filesize

      1.6MB

    • memory/3652-157-0x0000000076EE0000-0x000000007706E000-memory.dmp

      Filesize

      1.6MB

    • memory/3652-158-0x0000000076EE0000-0x000000007706E000-memory.dmp

      Filesize

      1.6MB

    • memory/3652-159-0x0000000076EE0000-0x000000007706E000-memory.dmp

      Filesize

      1.6MB

    • memory/3652-160-0x0000000076EE0000-0x000000007706E000-memory.dmp

      Filesize

      1.6MB

    • memory/3652-161-0x0000000076EE0000-0x000000007706E000-memory.dmp

      Filesize

      1.6MB

    • memory/3652-162-0x0000000076EE0000-0x000000007706E000-memory.dmp

      Filesize

      1.6MB

    • memory/3652-163-0x0000000076EE0000-0x000000007706E000-memory.dmp

      Filesize

      1.6MB

    • memory/3652-164-0x0000000076EE0000-0x000000007706E000-memory.dmp

      Filesize

      1.6MB

    • memory/3652-165-0x0000000076EE0000-0x000000007706E000-memory.dmp

      Filesize

      1.6MB

    • memory/3652-166-0x0000000076EE0000-0x000000007706E000-memory.dmp

      Filesize

      1.6MB

    • memory/3652-167-0x0000000076EE0000-0x000000007706E000-memory.dmp

      Filesize

      1.6MB

    • memory/3652-168-0x0000000076EE0000-0x000000007706E000-memory.dmp

      Filesize

      1.6MB

    • memory/3652-170-0x0000000076EE0000-0x000000007706E000-memory.dmp

      Filesize

      1.6MB

    • memory/3652-169-0x0000000076EE0000-0x000000007706E000-memory.dmp

      Filesize

      1.6MB

    • memory/3652-172-0x0000000076EE0000-0x000000007706E000-memory.dmp

      Filesize

      1.6MB

    • memory/3652-171-0x0000000076EE0000-0x000000007706E000-memory.dmp

      Filesize

      1.6MB

    • memory/3652-173-0x0000000076EE0000-0x000000007706E000-memory.dmp

      Filesize

      1.6MB

    • memory/3652-174-0x0000000076EE0000-0x000000007706E000-memory.dmp

      Filesize

      1.6MB