d801739cd759094dc7d1608191364ab38f7a1b5701f92a5a4ba76bd07631e302

Analysis

max time kernel
117s
max time network
122s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
11/10/2023, 09:31

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

d801739cd759094dc7d1608191364ab38f7a1b5701f92a5a4ba76bd07631e302.dll
Size

12.4MB
MD5

e14b7bba51655807d120573f1b949d60
SHA1

b41aea48890074a803ccf3030b8cc7a7b49cd102
SHA256

d801739cd759094dc7d1608191364ab38f7a1b5701f92a5a4ba76bd07631e302
SHA512

191cb76b1ce71dbc557a5d875bc7c7fb1798fa3bc3ef518ca69012d5de3f701f70b6368336f80b6c677e3ffbecf51f3dad3e9c0f8e4e257f3b63301cc67cb840
SSDEEP

393216:y4tl8trrkO8JCaL/ABxFFI7KXn3x/84r9:2SCa4UK3pp

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 2256 wrote to memory of 1100	2256	rundll32.exe	28
PID 2256 wrote to memory of 1100	2256	rundll32.exe	28
PID 2256 wrote to memory of 1100	2256	rundll32.exe	28
PID 2256 wrote to memory of 1100	2256	rundll32.exe	28
PID 2256 wrote to memory of 1100	2256	rundll32.exe	28
PID 2256 wrote to memory of 1100	2256	rundll32.exe	28
PID 2256 wrote to memory of 1100	2256	rundll32.exe	28

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\d801739cd759094dc7d1608191364ab38f7a1b5701f92a5a4ba76bd07631e302.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2256
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\d801739cd759094dc7d1608191364ab38f7a1b5701f92a5a4ba76bd07631e302.dll,#1
  2⤵
  PID:1100

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1100-0-0x0000000010000000-0x0000000011A40000-memory.dmp

Filesize
26.2MB

Download
memory/1100-1-0x0000000010000000-0x0000000011A40000-memory.dmp

Filesize
26.2MB

Download
memory/1100-4-0x0000000010000000-0x0000000011A40000-memory.dmp

Filesize
26.2MB

Download
memory/1100-8-0x0000000010000000-0x0000000011A40000-memory.dmp

Filesize
26.2MB

Download
memory/1100-12-0x0000000010000000-0x0000000011A40000-memory.dmp

Filesize
26.2MB

Download
memory/1100-16-0x0000000010000000-0x0000000011A40000-memory.dmp

Filesize
26.2MB

Download
memory/1100-20-0x0000000010000000-0x0000000011A40000-memory.dmp

Filesize
26.2MB

Download
memory/1100-23-0x0000000010000000-0x0000000011A40000-memory.dmp

Filesize
26.2MB

Download
memory/1100-24-0x0000000010000000-0x0000000011A40000-memory.dmp

Filesize
26.2MB

Download
memory/1100-25-0x00000000021C0000-0x0000000002F00000-memory.dmp

Filesize
13.2MB

Download
memory/1100-32-0x0000000010000000-0x0000000011A40000-memory.dmp

Filesize
26.2MB

Download
memory/1100-33-0x00000000001B0000-0x00000000001B1000-memory.dmp

Filesize
4KB

Download
memory/1100-36-0x00000000021C0000-0x0000000002F00000-memory.dmp

Filesize
13.2MB

Download
memory/1100-39-0x0000000010000000-0x0000000011A40000-memory.dmp

Filesize
26.2MB

Download
memory/1100-40-0x0000000010000000-0x0000000011A40000-memory.dmp

Filesize
26.2MB

Download
memory/1100-41-0x0000000000200000-0x0000000000201000-memory.dmp

Filesize
4KB

Download
memory/1100-42-0x0000000010000000-0x0000000011A40000-memory.dmp

Filesize
26.2MB

Download
memory/1100-43-0x00000000021C0000-0x0000000002F00000-memory.dmp

Filesize
13.2MB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads