Analysis
-
max time kernel
34s -
max time network
39s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
29/10/2022, 18:45
Static task
static1
Behavioral task
behavioral1
Sample
7ffbf5de010b2b6d1bbfd63a2da6b5de0bd23991e75a00dde03b46630dfaefda.dll
Resource
win7-20220812-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
7ffbf5de010b2b6d1bbfd63a2da6b5de0bd23991e75a00dde03b46630dfaefda.dll
Resource
win10v2004-20220901-en
1 signatures
150 seconds
General
-
Target
7ffbf5de010b2b6d1bbfd63a2da6b5de0bd23991e75a00dde03b46630dfaefda.dll
-
Size
3KB
-
MD5
412475eed6525c75fef08e2c96f57560
-
SHA1
df49d07015fe80ec822bb2b207850a54c95120d8
-
SHA256
7ffbf5de010b2b6d1bbfd63a2da6b5de0bd23991e75a00dde03b46630dfaefda
-
SHA512
e5b9330b0cf0970c51f9be0dc907695a44febaf22c9ddc5761b4ea8a10b214216782189bc75342ac769e1d2a3e120bcf6ba5121507bb8ba083ceef51ce4d8f40
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 7 IoCs
description pid Process procid_target PID 836 wrote to memory of 1960 836 rundll32.exe 27 PID 836 wrote to memory of 1960 836 rundll32.exe 27 PID 836 wrote to memory of 1960 836 rundll32.exe 27 PID 836 wrote to memory of 1960 836 rundll32.exe 27 PID 836 wrote to memory of 1960 836 rundll32.exe 27 PID 836 wrote to memory of 1960 836 rundll32.exe 27 PID 836 wrote to memory of 1960 836 rundll32.exe 27
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\7ffbf5de010b2b6d1bbfd63a2da6b5de0bd23991e75a00dde03b46630dfaefda.dll,#11⤵
- Suspicious use of WriteProcessMemory
PID:836 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\7ffbf5de010b2b6d1bbfd63a2da6b5de0bd23991e75a00dde03b46630dfaefda.dll,#12⤵PID:1960
-