Analysis
- max time kernel
97s - max time network
103s - platform
windows10-1703_x64 - resource
win10-20230703-en - resource tags
- submitted
24/08/2023, 04:59
General
- Target xxx.dll
- Size 280KB
- Sample230824-fmhebaac33
- SHA256 092c344330bd5cba71377dead11946f7277f2dd4af57f5b636b70b343bc7ebe0
Score
1/10
Malware Config
Signatures
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 1 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\xxx.dll,#11⤵
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3368-1-0x00007FFAB3C40000-0x00007FFAB3E1B000-memory.dmp
memory/3368-2-0x00007FFAB31E0000-0x00007FFAB328E000-memory.dmp
memory/3368-4-0x00007FFAB31E0000-0x00007FFAB328E000-memory.dmp
memory/3368-3-0x00007FFAB3C40000-0x00007FFAB3E1B000-memory.dmp