14207d44797bfbbffb6dda70a1ca0ac7be5e2ffe88a5f9e15017bf18605b58cd | Triage

Analysis

max time kernel
165s
max time network
209s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
05-12-2022 11:25

Sharing

Report Analysis Logs

General

Target

14207d44797bfbbffb6dda70a1ca0ac7be5e2ffe88a5f9e15017bf18605b58cd.dll
Size

3KB
MD5

6f2c4f9d65fa486043d99bbd9c92c850
SHA1

3e50927cf48d317a4e0651dad98747207c678e44
SHA256

14207d44797bfbbffb6dda70a1ca0ac7be5e2ffe88a5f9e15017bf18605b58cd
SHA512

a371e21321ec53b46cc0668b51884aef4bbb32ece04e39e79b1a38bf30adce2b2f35fbbfb431609bf16a5ad19b3ff039ef499427b3ff51754d82e6715ede568f

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1304 wrote to memory of 1504	1304	rundll32.exe	75
PID 1304 wrote to memory of 1504	1304	rundll32.exe	75
PID 1304 wrote to memory of 1504	1304	rundll32.exe	75

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\14207d44797bfbbffb6dda70a1ca0ac7be5e2ffe88a5f9e15017bf18605b58cd.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:1304
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\14207d44797bfbbffb6dda70a1ca0ac7be5e2ffe88a5f9e15017bf18605b58cd.dll,#1
  2⤵
  PID:1504

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads