42cb082a5dcb4ef8a553d38b15f87aa0f5f408a8b78adf3320288320fac5c24d | Triage

Analysis

max time kernel
176s
max time network
188s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
08-07-2022 01:02

Sharing

Report Analysis Logs

General

Target

42cb082a5dcb4ef8a553d38b15f87aa0f5f408a8b78adf3320288320fac5c24d.dll
Size

136KB
MD5

dda7f3bb9dee24e6e2564ed656f1bf64
SHA1

e1ff05e4be55cae9a5d2035f40e923bbdda4b90c
SHA256

42cb082a5dcb4ef8a553d38b15f87aa0f5f408a8b78adf3320288320fac5c24d
SHA512

b832c2967366b62ccdb6d14f9ab22ce9b42862a2261aefd21bdc43bb1c8d2938ba91e85cd9f94a48a721a220df202866635f7c2dd20a9faa528eb1484fa77753

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 3044 wrote to memory of 4500	3044	rundll32.exe	80
PID 3044 wrote to memory of 4500	3044	rundll32.exe	80
PID 3044 wrote to memory of 4500	3044	rundll32.exe	80

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\42cb082a5dcb4ef8a553d38b15f87aa0f5f408a8b78adf3320288320fac5c24d.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:3044
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\42cb082a5dcb4ef8a553d38b15f87aa0f5f408a8b78adf3320288320fac5c24d.dll,#1
  2⤵
  PID:4500

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads