15fd81b4bde511ea03695bfdc33c161740bf403d67d8cc50eb7eec4b129f83f7 | Triage™

Analysis

max time kernel
45s
max time network
48s
platform
windows7_x64
resource
win7-20220414-en
submitted
10/07/2022, 12:30

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
920-54-0x0000000180000000-0x0000000180009000-memory.dll
Size 36KB
Sample220710-pprkfabdfk
SHA256 15fd81b4bde511ea03695bfdc33c161740bf403d67d8cc50eb7eec4b129f83f7
MD5 96222ca1053198c7a4161a626b244413
SHA1 c8c4e1b88c405ae56ea01df7780718f5a53371e2
SHA512 eb93b7952908f3802048aec68ec49b096ef2ea3e2fbc6249254a26381f5ce663daa8597050510bf17f21984e299671c772e2929054da5d087b8fefe458de7420
MD5 SHA1 SHA512

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2020	892	WerFault.exe	25

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 892 wrote to memory of 2020	892	rundll32.exe	27
PID 892 wrote to memory of 2020	892	rundll32.exe	27
PID 892 wrote to memory of 2020	892	rundll32.exe	27

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\920-54-0x0000000180000000-0x0000000180009000-memory.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:892
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 892 -s 56
  2⤵
  - Program crash
  PID:2020

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads