Analysis
- max time kernel
112s - max time network
145s - platform
windows10-2004_x64 - resource
win10v2004-20221111-en - resource tags
- submitted
05/01/2023, 01:23
General
- Target 3ec45659c2bc03e9e1a4d54d0476c06fe3ebfef8.dll
- Size 1.4MB
- Sample230105-bry6eadh81
- SHA256 6fb0ad3f756b5d1f871cf34c3e4ea47cb34643cd17709a09c25076c400313adf
Score
1/10
Malware Config
Signatures
- Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3ec45659c2bc03e9e1a4d54d0476c06fe3ebfef8.dll,#11⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3ec45659c2bc03e9e1a4d54d0476c06fe3ebfef8.dll,#12⤵
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4708-133-0x0000000074C70000-0x0000000074DE5000-memory.dmp
memory/4708-134-0x0000000000B80000-0x0000000000C9D000-memory.dmp
memory/4708-135-0x0000000074C70000-0x0000000074DE5000-memory.dmp
memory/4708-136-0x0000000000B80000-0x0000000000C40000-memory.dmp
memory/4708-137-0x0000000000C40000-0x0000000000CEA000-memory.dmp
memory/4708-140-0x0000000000B80000-0x0000000000C9D000-memory.dmp
memory/4708-141-0x0000000074C70000-0x0000000074DE5000-memory.dmp
memory/4708-142-0x0000000074C70000-0x0000000074D76000-memory.dmp