Analysis
-
max time kernel
92s -
max time network
165s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
13-10-2022 05:33
General
-
Target
新建文件夹/Inet_Download_Manager_v6.37.14_Final/Internet Download Manager/IDMNetMon.dll
-
Size
313KB
-
MD5
a3b53bb580c75d828eb2d870ca29df78
-
SHA1
778f2322d019d6399395967abeddf12569eac369
-
SHA256
6577e59b83671cac17b64d84895216422b216767e3dab0ba6d23fdf7f383cb99
-
SHA512
23e7eaada9f5b72d3ba8b21519da953e0268760b111fe34604a62bff9b23ea733c1df19f16f2f882cb84f6dd7568c856ccf4c88461276809e59e243c50289222
-
SSDEEP
6144:tusxf07mISbn3Rxml2s7r11qxf5yFxVNTkZySLfWsfXIGVTBQY6dyhCMbiu:CmFDxxf5y/bTkZyuOs/IGVTmY6dgnF
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe "C:\Users\Admin\AppData\Local\Temp\新建文件夹\Inet_Download_Manager_v6.37.14_Final\Internet Download Manager\IDMNetMon.dll",#11⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe "C:\Users\Admin\AppData\Local\Temp\新建文件夹\Inet_Download_Manager_v6.37.14_Final\Internet Download Manager\IDMNetMon.dll",#12⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1624-132-0x0000000000000000-mapping.dmp