Analysis
-
max time kernel
376s -
max time network
440s -
platform
windows10-1703_x64 -
resource
win10-20230220-en -
resource tags
arch:x64arch:x86image:win10-20230220-enlocale:en-usos:windows10-1703-x64system -
submitted
10-05-2023 17:49
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Dropsically.dll
Resource
win7-20230220-en
1 signatures
600 seconds
Behavioral task
behavioral2
Sample
Dropsically.dll
Resource
win10-20230220-en
1 signatures
600 seconds
Behavioral task
behavioral3
Sample
RunDLL-1.bat
Resource
win7-20230220-en
7 signatures
600 seconds
General
-
Target
Dropsically.dll
-
Size
342KB
-
MD5
921bc2f7086cce9b050da822cd92958c
-
SHA1
61abf391ea418d55af56949a9b8424bcee0a73cb
-
SHA256
085ea1c31cfb0851ebfa364ac72adfcd7187547ec8e10a60b0497ace3145a4a3
-
SHA512
b7db60ca43ab7526aa337447402d8c8859f15f823faa28f5a3834e668f126bec292810e960e0a4b349fc43e7b34438a95030ff4f8c8a8055a500551e30ea0d7d
-
SSDEEP
6144:d8ESLcu+wP1cIM0nX8lyvKGtlc6DyHkCefzH1GbOH52BaGPewOhwR+Pr+F:qEPu+Y2IrMEvbi6DyHkCez1GbOH52Bad
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes:
rundll32.exedescription pid Process procid_target PID 1916 wrote to memory of 1396 1916 rundll32.exe 66 PID 1916 wrote to memory of 1396 1916 rundll32.exe 66 PID 1916 wrote to memory of 1396 1916 rundll32.exe 66