Analysis

  • max time kernel
    156s
  • max time network
    164s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29/11/2022, 15:19

General

  • Target

    d9a2d68ae6cc079a012cea26964f20340173b2bf51103a4e534ec27bc4193406.dll

  • Size

    76KB

  • MD5

    3dd950a2dc5b3497b4b07773f32ae784

  • SHA1

    6f0512ba2c9e944e59e070ed1cef425d38f339b8

  • SHA256

    d9a2d68ae6cc079a012cea26964f20340173b2bf51103a4e534ec27bc4193406

  • SHA512

    04d1509202c142f24458c3bdcef00c6215a504326c25ddd62b820652e79b34935ad9522d3720d2ffd5683a448a714c0e87975badd3af34b0cdfff948dcef6532

  • SSDEEP

    1536:zSqnqthNBdoNtfBWyu03xVaejPy+0vVPWazBb+2m6mpWf:vnchNBWNtJxxVaeLy+4WazBbrcW

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\d9a2d68ae6cc079a012cea26964f20340173b2bf51103a4e534ec27bc4193406.dll,#1
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:528
    • C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\d9a2d68ae6cc079a012cea26964f20340173b2bf51103a4e534ec27bc4193406.dll,#1
      2⤵
        PID:4876
        • C:\Windows\SysWOW64\WerFault.exe
          C:\Windows\SysWOW64\WerFault.exe -u -p 4876 -s 556
          3⤵
          • Program crash
          PID:2184
    • C:\Windows\SysWOW64\WerFault.exe
      C:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 4876 -ip 4876
      1⤵
        PID:804

      Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            • memory/4876-133-0x0000000010000000-0x0000000010027000-memory.dmp

              Filesize

              156KB

            • memory/4876-135-0x0000000010000000-0x0000000010027000-memory.dmp

              Filesize

              156KB