f216c50f1d670afa8f530f85d431580901914c3780b2b6a25fd4cdd0b4c6d8da | Triage

Analysis

max time kernel
115s
max time network
168s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
14-05-2023 17:43

Sharing

Report Analysis Logs

General

Target

Project 64/Project64 1.6/Plugin/Adaptoid_v1_0.dll
Size

4KB
MD5

e88b25e65403638f5ca3f6e373f3d4e5
SHA1

514818c42c22990266e4269822a4ca6c07acc0cf
SHA256

127ade4ef446ea5a10345b0b3161e9e3c30f4adbf010f5a7f8c2fec40fb08daa
SHA512

86fbbddb8e89b52def31fedac31fdd5ab7d26f3e390311ae502622e90743da04b71b73dba4453e71ac9ee259d52fe3cd6f77505462a049d67b7099df3ec96153

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 4732 wrote to memory of 2020	4732	rundll32.exe	80
PID 4732 wrote to memory of 2020	4732	rundll32.exe	80
PID 4732 wrote to memory of 2020	4732	rundll32.exe	80

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\Project 64\Project64 1.6\Plugin\Adaptoid_v1_0.dll",#1
1⤵
- Suspicious use of WriteProcessMemory
PID:4732
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe "C:\Users\Admin\AppData\Local\Temp\Project 64\Project64 1.6\Plugin\Adaptoid_v1_0.dll",#1
  2⤵
  PID:2020

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads