Analysis
-
max time kernel
255s -
max time network
309s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
03/12/2022, 17:47
General
-
Target
eccf40d787b9dd9368a1e5159a76411bcdd4dcfffc45f36a2fdab0511f060fe2.dll
-
Size
239KB
-
MD5
91739edb4d6200f40dc165648427a1c8
-
SHA1
51d4eeae48f571060206abb73ed6530e750620e3
-
SHA256
eccf40d787b9dd9368a1e5159a76411bcdd4dcfffc45f36a2fdab0511f060fe2
-
SHA512
2a608f19e19467ef3e3c397000b32d41b55aede5133e81d7da44d8d772aafd03d4f849a9729dad7d8a4c784972c2c65d818ddf4d573e4bdf98a56eb3f6dd507a
-
SSDEEP
6144:zkXhFLogaVbJRdgHgnuoE681zPHM/4/3S7o:zQLogalJRdgHZoEXRs/4v+o
Score
8/10
Malware Config
Signatures
-
UPX packed file 4 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\eccf40d787b9dd9368a1e5159a76411bcdd4dcfffc45f36a2fdab0511f060fe2.dll,#11⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\eccf40d787b9dd9368a1e5159a76411bcdd4dcfffc45f36a2fdab0511f060fe2.dll,#12⤵
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
312KB
-
Filesize
312KB
-
Filesize
312KB
-
Filesize
312KB