Analysis

  • max time kernel
    31s
  • max time network
    34s
  • platform
    windows7_x64
  • resource
    win7-20221111-en
  • resource tags

    arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
  • submitted
    03/01/2023, 16:10

General

  • Target

    1896-57-0x0000000000120000-0x0000000000142000-memory.dll

  • Size

    136KB

  • MD5

    dc61fa081dc449e6138621ab64cd4b24

  • SHA1

    ddca8728b156facd92d952279467c6004f202e75

  • SHA256

    d79438816bb210e0d4af4c897ae2b89ebd77e614ef21a78cffa91d820e2dd5e9

  • SHA512

    dc9cdc4cc7454abac4a0dfaf8cdb556e91da0c1fb9d38de0d8e4199f1cd1f07a91cfa64967c2df8eec5be440da45959981ee4312f79a9761bb01864ae9b390d2

  • SSDEEP

    1536:i05x1lQyRClYCZwwaoF8mLspYBGBAT5KJ9wmAaPIOFnToIfFn4egrzMt:i02HJaWHLk62AwJqm3BtTBfF4ept

Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 7 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\1896-57-0x0000000000120000-0x0000000000142000-memory.dll,#1
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:364
    • C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\1896-57-0x0000000000120000-0x0000000000142000-memory.dll,#1
      2⤵
        PID:1868

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • memory/1868-55-0x00000000757E1000-0x00000000757E3000-memory.dmp

            Filesize

            8KB