027778e02c89449988efa9206ca9e180716d7f20ae9cc1307a0db036e704537a | Triage

Analysis

max time kernel
47s
max time network
51s
platform
windows7_x64
resource
win7-20220414-en
submitted
26/06/2022, 10:25

Sharing

Report Analysis Logs

General

Target

m3n4rat/m3n4rat.dll
Size

1.8MB
MD5

724592144348d0ba98a9223219ceefee
SHA1

db9fd98fbb9ce7ec704098e2d477a92a7b7ccf5f
SHA256

4a0e5ef64581b583efc5e5de2d6dbfa17fe0c98e6e393e3901a9ce79e2b6890e
SHA512

ccf58c7ab8f7cafa7cf01acc69c367b2216d7e80aa1914a8527187317089f72e27db4c946d5b9aa9d803865e964842166f2aa863918f4e189b20887dfb3d97b4

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1944	1932	WerFault.exe	26

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1932 wrote to memory of 1944	1932	rundll32.exe	27
PID 1932 wrote to memory of 1944	1932	rundll32.exe	27
PID 1932 wrote to memory of 1944	1932	rundll32.exe	27

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\m3n4rat\m3n4rat.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:1932
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 1932 -s 84
  2⤵
  - Program crash
  PID:1944

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads