Analysis
- max time kernel
143s - max time network
148s - platform
windows10-2004_x64 - resource
win10v2004-20230703-en - resource tags
- submitted
18/07/2023, 20:29
General
- Target SecuriteInfo.com.Trojan.VkHost.6856.22372.dll
- Size 1.1MB
- Sample230718-y9j6jaee2x
- SHA256 17c38669d795041d570650acdd426b0e0bb8b6019b0b9c43e55f368566ea20ac
Malware Config
Signatures
- Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Trojan.VkHost.6856.22372.dll,#11⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Trojan.VkHost.6856.22372.dll,#12⤵
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4808-133-0x00000000024B0000-0x0000000002627000-memory.dmp
memory/4808-134-0x00000000024B0000-0x0000000002627000-memory.dmp
memory/4808-135-0x00000000026A0000-0x00000000026FA000-memory.dmp
memory/4808-136-0x00000000028D0000-0x00000000028D1000-memory.dmp
memory/4808-137-0x00000000028C0000-0x00000000028C1000-memory.dmp
memory/4808-138-0x00000000028B0000-0x00000000028B1000-memory.dmp
memory/4808-139-0x0000000002920000-0x0000000002921000-memory.dmp
memory/4808-140-0x00000000028F0000-0x00000000028F1000-memory.dmp
memory/4808-141-0x0000000002940000-0x0000000002941000-memory.dmp
memory/4808-142-0x0000000003730000-0x0000000003732000-memory.dmp
memory/4808-143-0x00000000024B0000-0x0000000002627000-memory.dmp
memory/4808-144-0x00000000026A0000-0x00000000026FA000-memory.dmp