Analysis

  • max time kernel
    361s
  • max time network
    376s
  • platform
    windows7_x64
  • resource
    win7-20230712-es
  • resource tags

    arch:x64arch:x86image:win7-20230712-eslocale:es-esos:windows7-x64systemwindows
  • submitted
    02/08/2023, 23:39

General

  • Target

    Common Files/BasicSDK.dll

  • Size

    132KB

  • MD5

    434ab5ab8f4063a9f8bb77ecc5399e28

  • SHA1

    21500961d8e1d46c0c1e2a397c2a379c11f0c3da

  • SHA256

    4c4a3aad46935c4606e4512a6ab934a108904878a648e1a490ac2b6a3a0b3af2

  • SHA512

    470a6d5fdea01ed4e24b3535d9087101fb906c79f0fcecf570d268c3bc43ba7a72909e89ef8bb886f59dcb9d29e25b658ba23fd86fb5ca82b042d1d1126117fd

  • SSDEEP

    3072:MJ2dwEbhBm32dwCH8mxaklemwbeR1SqEF0:thRfsmwbSs0

Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 7 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe "C:\Users\Admin\AppData\Local\Temp\Common Files\BasicSDK.dll",#1
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1492
    • C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe "C:\Users\Admin\AppData\Local\Temp\Common Files\BasicSDK.dll",#1
      2⤵
        PID:2592

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2592-54-0x0000000000170000-0x0000000000189000-memory.dmp

      Filesize

      100KB

    • memory/2592-55-0x00000000001B0000-0x00000000001DF000-memory.dmp

      Filesize

      188KB

    • memory/2592-57-0x00000000001E0000-0x00000000001F2000-memory.dmp

      Filesize

      72KB

    • memory/2592-59-0x0000000000290000-0x00000000002A1000-memory.dmp

      Filesize

      68KB

    • memory/2592-61-0x00000000002F0000-0x000000000030D000-memory.dmp

      Filesize

      116KB

    • memory/2592-63-0x0000000002080000-0x0000000002291000-memory.dmp

      Filesize

      2.1MB

    • memory/2592-64-0x0000000000310000-0x000000000034E000-memory.dmp

      Filesize

      248KB

    • memory/2592-66-0x00000000022A0000-0x00000000028A9000-memory.dmp

      Filesize

      6.0MB

    • memory/2592-68-0x0000000000200000-0x000000000020D000-memory.dmp

      Filesize

      52KB

    • memory/2592-69-0x00000000028B0000-0x0000000002E89000-memory.dmp

      Filesize

      5.8MB

    • memory/2592-71-0x0000000000360000-0x0000000000407000-memory.dmp

      Filesize

      668KB

    • memory/2592-73-0x0000000000840000-0x000000000086C000-memory.dmp

      Filesize

      176KB

    • memory/2592-75-0x0000000000880000-0x00000000008D7000-memory.dmp

      Filesize

      348KB

    • memory/2592-77-0x0000000000910000-0x0000000000934000-memory.dmp

      Filesize

      144KB

    • memory/2592-79-0x0000000000970000-0x0000000000984000-memory.dmp

      Filesize

      80KB

    • memory/2592-81-0x00000000009A0000-0x00000000009B3000-memory.dmp

      Filesize

      76KB

    • memory/2592-83-0x00000000009C0000-0x0000000000A30000-memory.dmp

      Filesize

      448KB

    • memory/2592-85-0x0000000000AB0000-0x0000000000B10000-memory.dmp

      Filesize

      384KB

    • memory/2592-87-0x0000000000A30000-0x0000000000A4E000-memory.dmp

      Filesize

      120KB

    • memory/2592-89-0x0000000000A50000-0x0000000000A64000-memory.dmp

      Filesize

      80KB

    • memory/2592-91-0x0000000000B10000-0x0000000000B20000-memory.dmp

      Filesize

      64KB

    • memory/2592-93-0x0000000001F60000-0x0000000001F6E000-memory.dmp

      Filesize

      56KB

    • memory/2592-95-0x0000000001FD0000-0x000000000200E000-memory.dmp

      Filesize

      248KB