9790452393c8854dc8da507d5941c1d6576ca56070431abfa4888f91ed2071db | Triage

Analysis

max time kernel
172s
max time network
177s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
23-11-2022 18:06

Sharing

Report Analysis Logs

General

Target

9790452393c8854dc8da507d5941c1d6576ca56070431abfa4888f91ed2071db.dll
Size

3KB
MD5

070212cddd7ca38649de5d6803b1487d
SHA1

d740ed9300d5754de7b44ebeabca84d4373341ea
SHA256

9790452393c8854dc8da507d5941c1d6576ca56070431abfa4888f91ed2071db
SHA512

a65428548feada9c7bfda3a19332d6e450742423187c45dfbe069e01dc889f1d7e54884e1fbf91381d52da85167fa4b9a95b5e4e23b5404f54fc18ed5f88166a

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 460 wrote to memory of 3668	460	rundll32.exe	84
PID 460 wrote to memory of 3668	460	rundll32.exe	84
PID 460 wrote to memory of 3668	460	rundll32.exe	84

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\9790452393c8854dc8da507d5941c1d6576ca56070431abfa4888f91ed2071db.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:460
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\9790452393c8854dc8da507d5941c1d6576ca56070431abfa4888f91ed2071db.dll,#1
  2⤵
  PID:3668

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads