Analysis

  • max time kernel
    120s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20230712-en
  • resource tags

    arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
  • submitted
    23/08/2023, 00:00

General

  • Target

    c08369080cd3a4aeb85de6fa817d10bdb481231e580a7d980417a8fa1bca93c5.dll

  • Size

    899KB

  • MD5

    f0f828da23ecc4abcf7b943dd59639fb

  • SHA1

    cc321e64ea4333c1ec53edeed2750c80a5a3df2d

  • SHA256

    c08369080cd3a4aeb85de6fa817d10bdb481231e580a7d980417a8fa1bca93c5

  • SHA512

    4b184549af02c78c841b791b2da9374b503add0b9d73f420d24fe83c6a1488b1b02dea4a7e510ef01f3bbe8ff3be90aa6c814802c312c4e0abfd7cf3f8b13064

  • SSDEEP

    24576:7V2bG+2gMir4fgt7ibhRM5QhKehFdMtRj7nH1PXb:7wqd87Vb

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: RenamesItself 1 IoCs
  • Suspicious use of WriteProcessMemory 7 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\c08369080cd3a4aeb85de6fa817d10bdb481231e580a7d980417a8fa1bca93c5.dll,#1
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2600
    • C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\c08369080cd3a4aeb85de6fa817d10bdb481231e580a7d980417a8fa1bca93c5.dll,#1
      2⤵
      • Suspicious behavior: RenamesItself
      PID:1736

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads