Analysis

  • max time kernel
    31s
  • max time network
    47s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    29/11/2022, 15:19

General

  • Target

    d9a2d68ae6cc079a012cea26964f20340173b2bf51103a4e534ec27bc4193406.dll

  • Size

    76KB

  • MD5

    3dd950a2dc5b3497b4b07773f32ae784

  • SHA1

    6f0512ba2c9e944e59e070ed1cef425d38f339b8

  • SHA256

    d9a2d68ae6cc079a012cea26964f20340173b2bf51103a4e534ec27bc4193406

  • SHA512

    04d1509202c142f24458c3bdcef00c6215a504326c25ddd62b820652e79b34935ad9522d3720d2ffd5683a448a714c0e87975badd3af34b0cdfff948dcef6532

  • SSDEEP

    1536:zSqnqthNBdoNtfBWyu03xVaejPy+0vVPWazBb+2m6mpWf:vnchNBWNtJxxVaeLy+4WazBbrcW

Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 7 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\d9a2d68ae6cc079a012cea26964f20340173b2bf51103a4e534ec27bc4193406.dll,#1
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1496
    • C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\d9a2d68ae6cc079a012cea26964f20340173b2bf51103a4e534ec27bc4193406.dll,#1
      2⤵
        PID:1600

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • memory/1600-55-0x00000000761F1000-0x00000000761F3000-memory.dmp

            Filesize

            8KB

          • memory/1600-56-0x0000000010000000-0x0000000010027000-memory.dmp

            Filesize

            156KB

          • memory/1600-58-0x0000000010000000-0x0000000010027000-memory.dmp

            Filesize

            156KB

          • memory/1600-59-0x0000000010000000-0x0000000010027000-memory.dmp

            Filesize

            156KB