Analysis

  • max time kernel
    152s
  • max time network
    198s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20221111-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
  • submitted
    01/12/2022, 02:18

General

  • Target

    849bfc7077d8800539bde96ac3d9aaf70f342943b7aba964eb8c818fdfb385ec.dll

  • Size

    18KB

  • MD5

    c306a8d510a1740c58b2e0b9089b651e

  • SHA1

    2e062a357bc05bcc68af2e2060ef5fcdac549f82

  • SHA256

    849bfc7077d8800539bde96ac3d9aaf70f342943b7aba964eb8c818fdfb385ec

  • SHA512

    6b14f14d9c7e6bd8649d4c0a0cfd4022c2524b826958de9aad591a586505ec15230cea239a166567e80ca5b233d4c3a0cf44e880d4ad73d52126fdb2e7ec931c

  • SSDEEP

    384:j4jHVeeLfgPqc+urDZRQsa/LbEzy5IwB0E2bIXXiKjx4:MzV7kCBufPNCN2bKXn94

Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\849bfc7077d8800539bde96ac3d9aaf70f342943b7aba964eb8c818fdfb385ec.dll,#1
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:3804
    • C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\849bfc7077d8800539bde96ac3d9aaf70f342943b7aba964eb8c818fdfb385ec.dll,#1
      2⤵
        PID:4508

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads