Analysis
-
max time kernel
143s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
-
submitted
22/09/2023, 03:07
General
-
Target
516d9fb7cd9d28d54bd6d18e0b8a5a0c86cb7869753a822a34051cb4c3e214f5.dll
-
Size
1.0MB
-
MD5
42f438dcbb8a7c3d046f2cf70c1ad3b9
-
SHA1
a339b5086cec9f226999d0f9eabebf7b1d2723e7
-
SHA256
516d9fb7cd9d28d54bd6d18e0b8a5a0c86cb7869753a822a34051cb4c3e214f5
-
SHA512
98a9e20f424390444210b628691bb53ae792932b011313b1367087c8745ef1b03a48564e76f17d61a01aa23195498f9f779b5f65f6ccc467606c97681539ca5e
-
SSDEEP
24576:0FDpEW1jX2aGw82ZY4S1+A0Sg+SbfiWhB:KqaTS1WUSphB
Score
7/10
Malware Config
Signatures
-
UPX packed file 25 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Program crash 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\516d9fb7cd9d28d54bd6d18e0b8a5a0c86cb7869753a822a34051cb4c3e214f5.dll,#11⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\516d9fb7cd9d28d54bd6d18e0b8a5a0c86cb7869753a822a34051cb4c3e214f5.dll,#12⤵
- Suspicious use of SetWindowsHookEx
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2144 -s 7123⤵
- Program crash
-
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2144 -ip 21441⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB