Analysis

  • max time kernel
    54s
  • max time network
    71s
  • platform
    windows10-1703_x64
  • resource
    win10-20220812-en
  • resource tags

    arch:x64arch:x86image:win10-20220812-enlocale:en-usos:windows10-1703-x64system
  • submitted
    24-09-2022 03:13

General

  • Target

    autorun.dll

  • Size

    624KB

  • MD5

    98c26bafe8abd7cc9ccf037d4f8ca5e2

  • SHA1

    7993309decc39cd7aa69412a5e212f56501dd882

  • SHA256

    fb3ac39fdbcfc1243d5dd23314d13baafe3a05cd7f5b0eaae174c345c3de1c1a

  • SHA512

    e73c8466b5c209df7606bc3fca688a4397d94994bf0dbcfa8c08004ca2b318580f85736ea256a91ad360fa9e8415637c056c6fc815f1273a17ae1bb03137ea03

  • SSDEEP

    12288:RnWTGfLIYsoQnWq+SoQoCAcruhb2YT9BCnCKzUroHUudh3jNrLjeGm+M:Rn4GfLIYsoQkSToCAcruQI9BCC3roH5n

Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\autorun.dll,#1
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2748
    • C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\autorun.dll,#1
      2⤵
        PID:2744

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2744-115-0x0000000000000000-mapping.dmp
    • memory/2744-116-0x0000000077100000-0x000000007728E000-memory.dmp
      Filesize

      1.6MB

    • memory/2744-117-0x0000000077100000-0x000000007728E000-memory.dmp
      Filesize

      1.6MB

    • memory/2744-118-0x0000000077100000-0x000000007728E000-memory.dmp
      Filesize

      1.6MB

    • memory/2744-119-0x0000000077100000-0x000000007728E000-memory.dmp
      Filesize

      1.6MB

    • memory/2744-120-0x0000000077100000-0x000000007728E000-memory.dmp
      Filesize

      1.6MB

    • memory/2744-121-0x0000000077100000-0x000000007728E000-memory.dmp
      Filesize

      1.6MB

    • memory/2744-122-0x0000000077100000-0x000000007728E000-memory.dmp
      Filesize

      1.6MB

    • memory/2744-123-0x0000000077100000-0x000000007728E000-memory.dmp
      Filesize

      1.6MB

    • memory/2744-124-0x0000000077100000-0x000000007728E000-memory.dmp
      Filesize

      1.6MB

    • memory/2744-125-0x0000000077100000-0x000000007728E000-memory.dmp
      Filesize

      1.6MB

    • memory/2744-126-0x0000000077100000-0x000000007728E000-memory.dmp
      Filesize

      1.6MB

    • memory/2744-127-0x0000000077100000-0x000000007728E000-memory.dmp
      Filesize

      1.6MB

    • memory/2744-128-0x0000000077100000-0x000000007728E000-memory.dmp
      Filesize

      1.6MB

    • memory/2744-129-0x0000000077100000-0x000000007728E000-memory.dmp
      Filesize

      1.6MB

    • memory/2744-130-0x0000000077100000-0x000000007728E000-memory.dmp
      Filesize

      1.6MB

    • memory/2744-131-0x0000000077100000-0x000000007728E000-memory.dmp
      Filesize

      1.6MB

    • memory/2744-132-0x0000000077100000-0x000000007728E000-memory.dmp
      Filesize

      1.6MB

    • memory/2744-133-0x0000000077100000-0x000000007728E000-memory.dmp
      Filesize

      1.6MB

    • memory/2744-134-0x0000000077100000-0x000000007728E000-memory.dmp
      Filesize

      1.6MB

    • memory/2744-135-0x0000000077100000-0x000000007728E000-memory.dmp
      Filesize

      1.6MB

    • memory/2744-136-0x0000000077100000-0x000000007728E000-memory.dmp
      Filesize

      1.6MB

    • memory/2744-137-0x0000000077100000-0x000000007728E000-memory.dmp
      Filesize

      1.6MB

    • memory/2744-138-0x0000000077100000-0x000000007728E000-memory.dmp
      Filesize

      1.6MB

    • memory/2744-139-0x0000000077100000-0x000000007728E000-memory.dmp
      Filesize

      1.6MB

    • memory/2744-140-0x0000000077100000-0x000000007728E000-memory.dmp
      Filesize

      1.6MB

    • memory/2744-141-0x0000000077100000-0x000000007728E000-memory.dmp
      Filesize

      1.6MB

    • memory/2744-142-0x0000000077100000-0x000000007728E000-memory.dmp
      Filesize

      1.6MB

    • memory/2744-143-0x0000000077100000-0x000000007728E000-memory.dmp
      Filesize

      1.6MB

    • memory/2744-144-0x0000000077100000-0x000000007728E000-memory.dmp
      Filesize

      1.6MB

    • memory/2744-145-0x0000000077100000-0x000000007728E000-memory.dmp
      Filesize

      1.6MB

    • memory/2744-146-0x0000000077100000-0x000000007728E000-memory.dmp
      Filesize

      1.6MB

    • memory/2744-147-0x0000000077100000-0x000000007728E000-memory.dmp
      Filesize

      1.6MB

    • memory/2744-148-0x0000000077100000-0x000000007728E000-memory.dmp
      Filesize

      1.6MB

    • memory/2744-149-0x0000000077100000-0x000000007728E000-memory.dmp
      Filesize

      1.6MB

    • memory/2744-150-0x0000000077100000-0x000000007728E000-memory.dmp
      Filesize

      1.6MB

    • memory/2744-151-0x0000000077100000-0x000000007728E000-memory.dmp
      Filesize

      1.6MB

    • memory/2744-152-0x0000000077100000-0x000000007728E000-memory.dmp
      Filesize

      1.6MB

    • memory/2744-153-0x0000000077100000-0x000000007728E000-memory.dmp
      Filesize

      1.6MB

    • memory/2744-154-0x0000000077100000-0x000000007728E000-memory.dmp
      Filesize

      1.6MB

    • memory/2744-155-0x0000000077100000-0x000000007728E000-memory.dmp
      Filesize

      1.6MB

    • memory/2744-156-0x0000000077100000-0x000000007728E000-memory.dmp
      Filesize

      1.6MB

    • memory/2744-157-0x0000000077100000-0x000000007728E000-memory.dmp
      Filesize

      1.6MB

    • memory/2744-158-0x0000000077100000-0x000000007728E000-memory.dmp
      Filesize

      1.6MB

    • memory/2744-159-0x0000000077100000-0x000000007728E000-memory.dmp
      Filesize

      1.6MB

    • memory/2744-160-0x0000000077100000-0x000000007728E000-memory.dmp
      Filesize

      1.6MB

    • memory/2744-161-0x0000000077100000-0x000000007728E000-memory.dmp
      Filesize

      1.6MB

    • memory/2744-162-0x0000000077100000-0x000000007728E000-memory.dmp
      Filesize

      1.6MB

    • memory/2744-163-0x0000000077100000-0x000000007728E000-memory.dmp
      Filesize

      1.6MB

    • memory/2744-164-0x0000000077100000-0x000000007728E000-memory.dmp
      Filesize

      1.6MB

    • memory/2744-165-0x0000000077100000-0x000000007728E000-memory.dmp
      Filesize

      1.6MB

    • memory/2744-166-0x0000000077100000-0x000000007728E000-memory.dmp
      Filesize

      1.6MB