07404e20c7be286478a20f9dd1c5e717c2505d5b0a75232934db96ddc1fcfb55 | Triage

Analysis

max time kernel
91s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
03/10/2022, 16:50

Sharing

Report Analysis Logs

General

Target

07404e20c7be286478a20f9dd1c5e717c2505d5b0a75232934db96ddc1fcfb55.dll
Size

3KB
MD5

6a05a2fdab61b75a203373c28c0923dd
SHA1

9fd613dc4c9a7c10ab7047235831f84cef457aa9
SHA256

07404e20c7be286478a20f9dd1c5e717c2505d5b0a75232934db96ddc1fcfb55
SHA512

f21d8a31fd37a2902a9849aa7d15589261ead9f6084deb3923b86fcf1e724fa1adfe23de60a9894b43f7f1c06fba2b27d548c4934fea65cbaeca76355c699771

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 3036 wrote to memory of 2296	3036	rundll32.exe	80
PID 3036 wrote to memory of 2296	3036	rundll32.exe	80
PID 3036 wrote to memory of 2296	3036	rundll32.exe	80

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\07404e20c7be286478a20f9dd1c5e717c2505d5b0a75232934db96ddc1fcfb55.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:3036
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\07404e20c7be286478a20f9dd1c5e717c2505d5b0a75232934db96ddc1fcfb55.dll,#1
  2⤵
  PID:2296

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads