Analysis
-
max time kernel
146s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system -
submitted
14/10/2023, 02:19
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
194306733c1a88c74271d21486cdbc0df668b860a2748aab4aefb011fb72223f.dll
Resource
win7-20230831-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
194306733c1a88c74271d21486cdbc0df668b860a2748aab4aefb011fb72223f.dll
Resource
win10v2004-20230915-en
1 signatures
150 seconds
General
-
Target
194306733c1a88c74271d21486cdbc0df668b860a2748aab4aefb011fb72223f.dll
-
Size
13.4MB
-
MD5
52f0abb3c2aee556d28a3c16cf26edc4
-
SHA1
2b8e35883d8192fd8881da05ce2fc5232fb1d805
-
SHA256
194306733c1a88c74271d21486cdbc0df668b860a2748aab4aefb011fb72223f
-
SHA512
ba9dd03a7e5d0bb98882ad56144edf0a412a1f2919306ca29b9bd37df1e9df1b1f094e07f54ca7f20557ac57aba5ccff62e429e85546522af6b7fe0b4e1d0753
-
SSDEEP
196608:tHa7cz78mKVyv0v2LbBztta9vt3sQdmym:tn78mKf2LbBzLKV8Qn
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 4836 wrote to memory of 432 4836 rundll32.exe 85 PID 4836 wrote to memory of 432 4836 rundll32.exe 85 PID 4836 wrote to memory of 432 4836 rundll32.exe 85
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\194306733c1a88c74271d21486cdbc0df668b860a2748aab4aefb011fb72223f.dll,#11⤵
- Suspicious use of WriteProcessMemory
PID:4836 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\194306733c1a88c74271d21486cdbc0df668b860a2748aab4aefb011fb72223f.dll,#12⤵PID:432
-