50df969f412391ca19609bbeeac268a4cf97ed8cc605fbfeddcb628373a637d9

Resubmissions

12-12-2022 14:44

221212-r4hl7aec7w 10

09-12-2022 20:54

221209-zpzwxshb4y 10

02-12-2022 06:24

221202-g6c5daed8w 10

Analysis

max time kernel
372s
max time network
437s
platform
windows10-1703_x64
resource
win10-20220812-en
resource tags

arch:x64arch:x86image:win10-20220812-enlocale:en-usos:windows10-1703-x64system
submitted
09-12-2022 20:54

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

119.dll
Size

600KB
MD5

86659e53d359999558acaf2de74ceda8
SHA1

76d86cce6c07ad8b1070e555e0e6de68ad01d34d
SHA256

b9c850873402914f5379f21fd04a18e63f2a4638a10bd2bfca005d4d4ed199f9
SHA512

9c3914680e0d9b7ca189c79870067814a4f8d6148da92e81cab3a45ab05c809dc484d32f82d47fc45bcf1ae88e5c4e1c3e1c8376c8bc5bff37fd909c0e37c448
SSDEEP

12288:QSUUEfo5I6/o2qgkpUdW9Msme0CWUdOWk4F:QSTiWDvLORme0C0Wk4

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

Processes:

rundll32.exe

description	pid	process	target process
PID 2660 wrote to memory of 2732	2660	rundll32.exe	rundll32.exe
PID 2660 wrote to memory of 2732	2660	rundll32.exe	rundll32.exe
PID 2660 wrote to memory of 2732	2660	rundll32.exe	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\119.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2660

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\119.dll,#1
2⤵
PID:2732

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2732-120-0x0000000000000000-mapping.dmp

Download
memory/2732-121-0x0000000077730000-0x00000000778BE000-memory.dmp

Filesize
1.6MB

Download
memory/2732-122-0x0000000077730000-0x00000000778BE000-memory.dmp

Filesize
1.6MB

Download
memory/2732-123-0x0000000077730000-0x00000000778BE000-memory.dmp

Filesize
1.6MB

Download
memory/2732-124-0x0000000077730000-0x00000000778BE000-memory.dmp

Filesize
1.6MB

Download
memory/2732-125-0x0000000077730000-0x00000000778BE000-memory.dmp

Filesize
1.6MB

Download
memory/2732-126-0x0000000077730000-0x00000000778BE000-memory.dmp

Filesize
1.6MB

Download
memory/2732-127-0x0000000077730000-0x00000000778BE000-memory.dmp

Filesize
1.6MB

Download
memory/2732-128-0x0000000077730000-0x00000000778BE000-memory.dmp

Filesize
1.6MB

Download
memory/2732-129-0x0000000077730000-0x00000000778BE000-memory.dmp

Filesize
1.6MB

Download
memory/2732-130-0x0000000077730000-0x00000000778BE000-memory.dmp

Filesize
1.6MB

Download
memory/2732-131-0x0000000077730000-0x00000000778BE000-memory.dmp

Filesize
1.6MB

Download
memory/2732-132-0x0000000077730000-0x00000000778BE000-memory.dmp

Filesize
1.6MB

Download
memory/2732-133-0x0000000077730000-0x00000000778BE000-memory.dmp

Filesize
1.6MB

Download
memory/2732-134-0x0000000077730000-0x00000000778BE000-memory.dmp

Filesize
1.6MB

Download
memory/2732-135-0x0000000077730000-0x00000000778BE000-memory.dmp

Filesize
1.6MB

Download
memory/2732-136-0x0000000077730000-0x00000000778BE000-memory.dmp

Filesize
1.6MB

Download
memory/2732-137-0x0000000077730000-0x00000000778BE000-memory.dmp

Filesize
1.6MB

Download
memory/2732-138-0x0000000077730000-0x00000000778BE000-memory.dmp

Filesize
1.6MB

Download
memory/2732-139-0x0000000077730000-0x00000000778BE000-memory.dmp

Filesize
1.6MB

Download
memory/2732-140-0x0000000077730000-0x00000000778BE000-memory.dmp

Filesize
1.6MB

Download
memory/2732-141-0x0000000077730000-0x00000000778BE000-memory.dmp

Filesize
1.6MB

Download
memory/2732-142-0x0000000077730000-0x00000000778BE000-memory.dmp

Filesize
1.6MB

Download
memory/2732-143-0x0000000077730000-0x00000000778BE000-memory.dmp

Filesize
1.6MB

Download
memory/2732-144-0x0000000077730000-0x00000000778BE000-memory.dmp

Filesize
1.6MB

Download
memory/2732-145-0x0000000077730000-0x00000000778BE000-memory.dmp

Filesize
1.6MB

Download
memory/2732-146-0x0000000077730000-0x00000000778BE000-memory.dmp

Filesize
1.6MB

Download
memory/2732-147-0x0000000077730000-0x00000000778BE000-memory.dmp

Filesize
1.6MB

Download
memory/2732-148-0x0000000077730000-0x00000000778BE000-memory.dmp

Filesize
1.6MB

Download
memory/2732-149-0x0000000077730000-0x00000000778BE000-memory.dmp

Filesize
1.6MB

Download
memory/2732-150-0x0000000077730000-0x00000000778BE000-memory.dmp

Filesize
1.6MB

Download
memory/2732-151-0x0000000077730000-0x00000000778BE000-memory.dmp

Filesize
1.6MB

Download
memory/2732-152-0x0000000077730000-0x00000000778BE000-memory.dmp

Filesize
1.6MB

Download
memory/2732-153-0x0000000077730000-0x00000000778BE000-memory.dmp

Filesize
1.6MB

Download
memory/2732-154-0x0000000077730000-0x00000000778BE000-memory.dmp

Filesize
1.6MB

Download
memory/2732-155-0x0000000077730000-0x00000000778BE000-memory.dmp

Filesize
1.6MB

Download
memory/2732-156-0x0000000077730000-0x00000000778BE000-memory.dmp

Filesize
1.6MB

Download
memory/2732-157-0x0000000077730000-0x00000000778BE000-memory.dmp

Filesize
1.6MB

Download
memory/2732-158-0x0000000077730000-0x00000000778BE000-memory.dmp

Filesize
1.6MB

Download
memory/2732-159-0x0000000077730000-0x00000000778BE000-memory.dmp

Filesize
1.6MB

Download
memory/2732-160-0x0000000077730000-0x00000000778BE000-memory.dmp

Filesize
1.6MB

Download
memory/2732-161-0x0000000077730000-0x00000000778BE000-memory.dmp

Filesize
1.6MB

Download
memory/2732-162-0x0000000077730000-0x00000000778BE000-memory.dmp

Filesize
1.6MB

Download
memory/2732-163-0x0000000077730000-0x00000000778BE000-memory.dmp

Filesize
1.6MB

Download
memory/2732-164-0x0000000077730000-0x00000000778BE000-memory.dmp

Filesize
1.6MB

Download