Analysis

  • max time kernel
    105s
  • max time network
    147s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    30/12/2022, 18:29

General

  • Target

    ec507225c406f6f9badc2e7da97f230692e1778e0139cd7439697bf6e5e519cc.dll

  • Size

    1.1MB

  • MD5

    3b28a3d058211761d873d065a7651d28

  • SHA1

    c78348dd3c0deb8bb6474dfb553610cb4aa6e372

  • SHA256

    ec507225c406f6f9badc2e7da97f230692e1778e0139cd7439697bf6e5e519cc

  • SHA512

    dbee64364bf43ae845bea141266a6b0f214421b38d2e190689f4097482247d51a7f77d79f0e5fc83a1d5dfe4ed7c6811eeeba1cc5e89b27927955d976e48000f

  • SSDEEP

    24576:bV1zZiTtDF34TyRuqrUui0BNlqV/g00LA:bFi5DFQy0qYwBmo00

Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\ec507225c406f6f9badc2e7da97f230692e1778e0139cd7439697bf6e5e519cc.dll,#1
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:4840
    • C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\ec507225c406f6f9badc2e7da97f230692e1778e0139cd7439697bf6e5e519cc.dll,#1
      2⤵
        PID:3928

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads