03d8cb8d5c2421bcb1e628e7824a15de35b60e31b4a21708f61d7217fd0dbe58 | Triage

Analysis

max time kernel
91s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
30/10/2022, 20:50

Sharing

Report Analysis Logs

General

Target

03d8cb8d5c2421bcb1e628e7824a15de35b60e31b4a21708f61d7217fd0dbe58.dll
Size

4KB
MD5

81b15ae80ce452d854a3cebdfd9d908c
SHA1

3bd8e9a2f758755fa6ffd8dab7986e529f157d2c
SHA256

03d8cb8d5c2421bcb1e628e7824a15de35b60e31b4a21708f61d7217fd0dbe58
SHA512

39aedb8ae533d863c4463c32a787e2dc243b8f7968adf4cbc22f52c5e12812d5b91d100b1b2fbed12afd572a60d0ff412449db57131b13d182d219c035721d9a

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 4788 wrote to memory of 4824	4788	rundll32.exe	81
PID 4788 wrote to memory of 4824	4788	rundll32.exe	81
PID 4788 wrote to memory of 4824	4788	rundll32.exe	81

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\03d8cb8d5c2421bcb1e628e7824a15de35b60e31b4a21708f61d7217fd0dbe58.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:4788
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\03d8cb8d5c2421bcb1e628e7824a15de35b60e31b4a21708f61d7217fd0dbe58.dll,#1
  2⤵
  PID:4824

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads