Analysis

  • max time kernel
    148s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    04/01/2023, 00:27

General

  • Target

    idle_master_extended_v1.8.0/Languages/fi/IdleMasterExtended.resources.dll

  • Size

    9KB

  • MD5

    b11d09b1176232bc1a0b7519833e4c0f

  • SHA1

    a643ea72f211195ab9d3cd76538afbd1ce196346

  • SHA256

    11090d858865f8d52bd1d9a70b608916beafeb859dd255d8fc687679da516b16

  • SHA512

    693381789c43abfc3074594967b0b3605424ea08e6ce3937413e36a3b9cd39e576aa5c2b4ac848b8f911e91f53026855262d6f808560357d917a453e79a64b3b

  • SSDEEP

    192:DicayCzyVkW+Qrw8U+PD5nu902ZgBHXfHXu2gbWyHi:GG1eW+Q2+LB2LOv9B

Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\idle_master_extended_v1.8.0\Languages\fi\IdleMasterExtended.resources.dll,#1
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:4140
    • C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\idle_master_extended_v1.8.0\Languages\fi\IdleMasterExtended.resources.dll,#1
      2⤵
        PID:1956

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads