Analysis
-
max time kernel
117s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system -
submitted
11/10/2023, 12:36
Static task
static1
Behavioral task
behavioral1
Sample
dfe2521a2608b015cbb65481345f8bb0501c803ccb13dd8dbbe3feb5122a5e82.dll
Resource
win7-20230831-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
dfe2521a2608b015cbb65481345f8bb0501c803ccb13dd8dbbe3feb5122a5e82.dll
Resource
win10v2004-20230915-en
1 signatures
150 seconds
General
-
Target
dfe2521a2608b015cbb65481345f8bb0501c803ccb13dd8dbbe3feb5122a5e82.dll
-
Size
2.0MB
-
MD5
bab09e06871f402c70af514117f4c8c2
-
SHA1
d8ea40a34a7bc237332019c413870563d12860db
-
SHA256
dfe2521a2608b015cbb65481345f8bb0501c803ccb13dd8dbbe3feb5122a5e82
-
SHA512
64971863b38e43e3965ba1dadbc479664ff5b1e9ba32fda6ced7cb570fa16bd39bbe074884590b3e8427c881d775a994f9d7d818343a82f3f2040eeed8659e91
-
SSDEEP
49152:Y0bxVqH+t6rw7AQ9RdFKFlk2Y/gCXPvxzZ9:Y03si+k9tKFlAF9
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 7 IoCs
description pid Process procid_target PID 2020 wrote to memory of 2336 2020 rundll32.exe 28 PID 2020 wrote to memory of 2336 2020 rundll32.exe 28 PID 2020 wrote to memory of 2336 2020 rundll32.exe 28 PID 2020 wrote to memory of 2336 2020 rundll32.exe 28 PID 2020 wrote to memory of 2336 2020 rundll32.exe 28 PID 2020 wrote to memory of 2336 2020 rundll32.exe 28 PID 2020 wrote to memory of 2336 2020 rundll32.exe 28
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\dfe2521a2608b015cbb65481345f8bb0501c803ccb13dd8dbbe3feb5122a5e82.dll,#11⤵
- Suspicious use of WriteProcessMemory
PID:2020 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\dfe2521a2608b015cbb65481345f8bb0501c803ccb13dd8dbbe3feb5122a5e82.dll,#12⤵PID:2336
-