Resubmissions

22-09-2022 16:56

220922-vf11eafgan 10

22-09-2022 16:47

220922-va1gpaffgr 3

13-09-2022 17:49

220913-wd1gjacabk 3

Analysis

  • max time kernel
    115s
  • max time network
    146s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • submitted
    13-09-2022 17:49

General

  • Target

    0c2a3456d8a82f95e615fbff0a35740e.dll

  • Size

    2.7MB

  • MD5

    0c2a3456d8a82f95e615fbff0a35740e

  • SHA1

    088236f029a63fe956fd1533f540d667c758d50f

  • SHA256

    dba0d741dd62e61776ec42115faf046cc9cb617411d60757a2c07fdd2beb6a6a

  • SHA512

    832b147a70f58fbd55aa869dcf612f2b109667d0a3f140e18cd0f6925ee5b4db00edfbbdf13b5e912c5b96d7127df991aba08b5a3f5770873fe17823bdea1728

  • SSDEEP

    49152:Jzl1rpbUrqvv0v2rQVt8nqwI7lOOYcf2ek:P1Kqvv07noI7lOOYcp

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\0c2a3456d8a82f95e615fbff0a35740e.dll,#1
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:3588
    • C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\0c2a3456d8a82f95e615fbff0a35740e.dll,#1
      2⤵
        PID:3664
        • C:\Windows\SysWOW64\WerFault.exe
          C:\Windows\SysWOW64\WerFault.exe -u -p 3664 -s 560
          3⤵
          • Program crash
          PID:624
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 3664 -ip 3664
      1⤵
        PID:3728

      Network

        No results found
      • 93.184.221.240:80
        260 B
        5
      • 93.184.221.240:80
        322 B
        7
      • 93.184.221.240:80
        322 B
        7
      • 93.184.220.29:80
        260 B
        5
      • 93.184.220.29:80
        260 B
        5
      • 104.80.225.205:443
        322 B
        7
      • 93.184.221.240:80
        322 B
        7
      • 93.184.221.240:80
        322 B
        7
      No results found

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      We care about your privacy.

      This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.