Analysis

  • max time kernel
    118s
  • max time network
    130s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29/10/2022, 00:07 UTC

General

  • Target

    c68129d7fdb0e55c9eac884de7e9a3a08faee7b9bd51d5ca89dbdd7f650d4dc1.dll

  • Size

    137KB

  • MD5

    0c1126f98d6cde8efe723865e3797160

  • SHA1

    0d9e333c6509b99f353e52abfc06c860d3a8820d

  • SHA256

    c68129d7fdb0e55c9eac884de7e9a3a08faee7b9bd51d5ca89dbdd7f650d4dc1

  • SHA512

    8474bd871c655d527e22a10f05becaa0fb7e2620d9ec3556ec0e53d28313ae7d1ba8375819d5fe70a4b361848340f824cdbac440bcbf7000087d0445ac0b38eb

  • SSDEEP

    3072:S8wA0TMD5Dqg0yN1nvAANSw8ltWoihGCyMOLySWst+fXxn0ILi:S8w6D4Kotup0LWI+fQ

Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\c68129d7fdb0e55c9eac884de7e9a3a08faee7b9bd51d5ca89dbdd7f650d4dc1.dll,#1
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1044
    • C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\c68129d7fdb0e55c9eac884de7e9a3a08faee7b9bd51d5ca89dbdd7f650d4dc1.dll,#1
      2⤵
        PID:3496

    Network

      No results found
    • 93.184.221.240:80
      46 B
      40 B
      1
      1
    • 209.197.3.8:80
      46 B
      40 B
      1
      1
    • 93.184.221.240:80
      322 B
      7
    • 93.184.221.240:80
      322 B
      7
    • 93.184.221.240:80
      322 B
      7
    • 93.184.221.240:80
      260 B
      5
    • 40.125.122.151:443
    • 51.104.136.2:443
    • 51.104.136.2:443
    • 20.190.159.64:443
    • 40.127.240.158:443
    • 8.8.8.8:53
    • 8.8.8.8:53
    • 8.8.8.8:53
    • 8.8.8.8:53
    • 8.8.8.8:53
    • 8.8.8.8:53

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    We care about your privacy.

    This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.