Analysis
-
max time kernel
54s -
max time network
71s -
platform
windows10-1703_x64 -
resource
win10-20220812-en -
resource tags
arch:x64arch:x86image:win10-20220812-enlocale:en-usos:windows10-1703-x64system -
submitted
24-09-2022 03:13
Static task
static1
Behavioral task
behavioral1
Sample
autoplay.exe
Resource
win10-20220812-en
Behavioral task
behavioral2
Sample
autorun.dll
Resource
win10-20220812-en
General
-
Target
autorun.dll
-
Size
624KB
-
MD5
98c26bafe8abd7cc9ccf037d4f8ca5e2
-
SHA1
7993309decc39cd7aa69412a5e212f56501dd882
-
SHA256
fb3ac39fdbcfc1243d5dd23314d13baafe3a05cd7f5b0eaae174c345c3de1c1a
-
SHA512
e73c8466b5c209df7606bc3fca688a4397d94994bf0dbcfa8c08004ca2b318580f85736ea256a91ad360fa9e8415637c056c6fc815f1273a17ae1bb03137ea03
-
SSDEEP
12288:RnWTGfLIYsoQnWq+SoQoCAcruhb2YT9BCnCKzUroHUudh3jNrLjeGm+M:Rn4GfLIYsoQkSToCAcruQI9BCC3roH5n
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes:
rundll32.exedescription pid process target process PID 2748 wrote to memory of 2744 2748 rundll32.exe rundll32.exe PID 2748 wrote to memory of 2744 2748 rundll32.exe rundll32.exe PID 2748 wrote to memory of 2744 2748 rundll32.exe rundll32.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/2744-115-0x0000000000000000-mapping.dmp
-
memory/2744-116-0x0000000077100000-0x000000007728E000-memory.dmpFilesize
1.6MB
-
memory/2744-117-0x0000000077100000-0x000000007728E000-memory.dmpFilesize
1.6MB
-
memory/2744-118-0x0000000077100000-0x000000007728E000-memory.dmpFilesize
1.6MB
-
memory/2744-119-0x0000000077100000-0x000000007728E000-memory.dmpFilesize
1.6MB
-
memory/2744-120-0x0000000077100000-0x000000007728E000-memory.dmpFilesize
1.6MB
-
memory/2744-121-0x0000000077100000-0x000000007728E000-memory.dmpFilesize
1.6MB
-
memory/2744-122-0x0000000077100000-0x000000007728E000-memory.dmpFilesize
1.6MB
-
memory/2744-123-0x0000000077100000-0x000000007728E000-memory.dmpFilesize
1.6MB
-
memory/2744-124-0x0000000077100000-0x000000007728E000-memory.dmpFilesize
1.6MB
-
memory/2744-125-0x0000000077100000-0x000000007728E000-memory.dmpFilesize
1.6MB
-
memory/2744-126-0x0000000077100000-0x000000007728E000-memory.dmpFilesize
1.6MB
-
memory/2744-127-0x0000000077100000-0x000000007728E000-memory.dmpFilesize
1.6MB
-
memory/2744-128-0x0000000077100000-0x000000007728E000-memory.dmpFilesize
1.6MB
-
memory/2744-129-0x0000000077100000-0x000000007728E000-memory.dmpFilesize
1.6MB
-
memory/2744-130-0x0000000077100000-0x000000007728E000-memory.dmpFilesize
1.6MB
-
memory/2744-131-0x0000000077100000-0x000000007728E000-memory.dmpFilesize
1.6MB
-
memory/2744-132-0x0000000077100000-0x000000007728E000-memory.dmpFilesize
1.6MB
-
memory/2744-133-0x0000000077100000-0x000000007728E000-memory.dmpFilesize
1.6MB
-
memory/2744-134-0x0000000077100000-0x000000007728E000-memory.dmpFilesize
1.6MB
-
memory/2744-135-0x0000000077100000-0x000000007728E000-memory.dmpFilesize
1.6MB
-
memory/2744-136-0x0000000077100000-0x000000007728E000-memory.dmpFilesize
1.6MB
-
memory/2744-137-0x0000000077100000-0x000000007728E000-memory.dmpFilesize
1.6MB
-
memory/2744-138-0x0000000077100000-0x000000007728E000-memory.dmpFilesize
1.6MB
-
memory/2744-139-0x0000000077100000-0x000000007728E000-memory.dmpFilesize
1.6MB
-
memory/2744-140-0x0000000077100000-0x000000007728E000-memory.dmpFilesize
1.6MB
-
memory/2744-141-0x0000000077100000-0x000000007728E000-memory.dmpFilesize
1.6MB
-
memory/2744-142-0x0000000077100000-0x000000007728E000-memory.dmpFilesize
1.6MB
-
memory/2744-143-0x0000000077100000-0x000000007728E000-memory.dmpFilesize
1.6MB
-
memory/2744-144-0x0000000077100000-0x000000007728E000-memory.dmpFilesize
1.6MB
-
memory/2744-145-0x0000000077100000-0x000000007728E000-memory.dmpFilesize
1.6MB
-
memory/2744-146-0x0000000077100000-0x000000007728E000-memory.dmpFilesize
1.6MB
-
memory/2744-147-0x0000000077100000-0x000000007728E000-memory.dmpFilesize
1.6MB
-
memory/2744-148-0x0000000077100000-0x000000007728E000-memory.dmpFilesize
1.6MB
-
memory/2744-149-0x0000000077100000-0x000000007728E000-memory.dmpFilesize
1.6MB
-
memory/2744-150-0x0000000077100000-0x000000007728E000-memory.dmpFilesize
1.6MB
-
memory/2744-151-0x0000000077100000-0x000000007728E000-memory.dmpFilesize
1.6MB
-
memory/2744-152-0x0000000077100000-0x000000007728E000-memory.dmpFilesize
1.6MB
-
memory/2744-153-0x0000000077100000-0x000000007728E000-memory.dmpFilesize
1.6MB
-
memory/2744-154-0x0000000077100000-0x000000007728E000-memory.dmpFilesize
1.6MB
-
memory/2744-155-0x0000000077100000-0x000000007728E000-memory.dmpFilesize
1.6MB
-
memory/2744-156-0x0000000077100000-0x000000007728E000-memory.dmpFilesize
1.6MB
-
memory/2744-157-0x0000000077100000-0x000000007728E000-memory.dmpFilesize
1.6MB
-
memory/2744-158-0x0000000077100000-0x000000007728E000-memory.dmpFilesize
1.6MB
-
memory/2744-159-0x0000000077100000-0x000000007728E000-memory.dmpFilesize
1.6MB
-
memory/2744-160-0x0000000077100000-0x000000007728E000-memory.dmpFilesize
1.6MB
-
memory/2744-161-0x0000000077100000-0x000000007728E000-memory.dmpFilesize
1.6MB
-
memory/2744-162-0x0000000077100000-0x000000007728E000-memory.dmpFilesize
1.6MB
-
memory/2744-163-0x0000000077100000-0x000000007728E000-memory.dmpFilesize
1.6MB
-
memory/2744-164-0x0000000077100000-0x000000007728E000-memory.dmpFilesize
1.6MB
-
memory/2744-165-0x0000000077100000-0x000000007728E000-memory.dmpFilesize
1.6MB
-
memory/2744-166-0x0000000077100000-0x000000007728E000-memory.dmpFilesize
1.6MB