Analysis
-
max time kernel
55s -
max time network
74s -
platform
windows10-1703_x64 -
resource
win10-20220812-en -
resource tags
arch:x64arch:x86image:win10-20220812-enlocale:en-usos:windows10-1703-x64system -
submitted
12-09-2022 21:31
Static task
static1
Behavioral task
behavioral1
Sample
tf2_public.dll
Resource
win10-20220812-en
windows10-1703-x64
1 signatures
150 seconds
General
-
Target
tf2_public.dll
-
Size
460KB
-
MD5
10783282c637aa490dd4a388f2f04f1e
-
SHA1
9718cc8afcdbdb6616cb5bd9515e96370e9f676a
-
SHA256
cf4968f87901d839e6c416c2e639861b1d72e087f0b3b6e0dc8e920a4eca84f9
-
SHA512
cdff887aafba4d288033eeb4d09e18910c584d6945aa7cc059878fa976e3e743d086d1e8f5dbebb788ec16c0c33e5d97e28262518fe649a718818ac1b745fa21
-
SSDEEP
12288:cC+lQSx9duOxlH/U/KoxFNgxnlnqgg5phGJshSMXlzbze:cCOPxNaKozNgxnlnrMhGJshSMXlzb
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 2672 wrote to memory of 2692 2672 rundll32.exe 66 PID 2672 wrote to memory of 2692 2672 rundll32.exe 66 PID 2672 wrote to memory of 2692 2672 rundll32.exe 66