Analysis
-
max time kernel
25s -
max time network
33s -
platform
windows7_x64 -
resource
win7-20221111-en -
resource tags
arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system -
submitted
29/11/2022, 15:08
Static task
static1
Behavioral task
behavioral1
Sample
7bbb03fcf3538ff5577033f71d278af6a082165915c2324d3139db9d11965637.dll
Resource
win7-20221111-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
7bbb03fcf3538ff5577033f71d278af6a082165915c2324d3139db9d11965637.dll
Resource
win10v2004-20221111-en
1 signatures
150 seconds
General
-
Target
7bbb03fcf3538ff5577033f71d278af6a082165915c2324d3139db9d11965637.dll
-
Size
3KB
-
MD5
471a3d3af26f78f38b990d3bc348dbe9
-
SHA1
3e96ba3a98f917a697f1446dc55410e41a3245f2
-
SHA256
7bbb03fcf3538ff5577033f71d278af6a082165915c2324d3139db9d11965637
-
SHA512
92e2066bbd2895804aeb2691d184ab57f7726ea96ee9331d497ca7996bd58d3b9e3783d8ce886076f2206819f5b90be131189847e516dd9a63dc9e6fdf27bf28
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 7 IoCs
description pid Process procid_target PID 1428 wrote to memory of 1664 1428 rundll32.exe 28 PID 1428 wrote to memory of 1664 1428 rundll32.exe 28 PID 1428 wrote to memory of 1664 1428 rundll32.exe 28 PID 1428 wrote to memory of 1664 1428 rundll32.exe 28 PID 1428 wrote to memory of 1664 1428 rundll32.exe 28 PID 1428 wrote to memory of 1664 1428 rundll32.exe 28 PID 1428 wrote to memory of 1664 1428 rundll32.exe 28
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\7bbb03fcf3538ff5577033f71d278af6a082165915c2324d3139db9d11965637.dll,#11⤵
- Suspicious use of WriteProcessMemory
PID:1428 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\7bbb03fcf3538ff5577033f71d278af6a082165915c2324d3139db9d11965637.dll,#12⤵PID:1664
-