Analysis
-
max time kernel
118s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system -
submitted
16-10-2023 16:11
Static task
static1
Behavioral task
behavioral1
Sample
Birdman/Birdman.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
Birdman/Birdman.dll
Resource
win10v2004-20230915-en
Behavioral task
behavioral3
Sample
Birdman/TZZ.pdf.lnk
Resource
win7-20230831-en
Behavioral task
behavioral4
Sample
Birdman/TZZ.pdf.lnk
Resource
win10v2004-20230915-en
General
-
Target
Birdman/Birdman.dll
-
Size
1.8MB
-
MD5
ec8db58467d8e2e2221635c592fcca1a
-
SHA1
e0215d156d2dc59b6259fd5ff792dc740626c8fa
-
SHA256
aebff5134e07a1586b911271a49702c8623b8ac8da2c135d4d3b0145a826f507
-
SHA512
5aaf241388dbb343e059af4a0cfd4d7507189f0c94f415ba9b9d87791e5f2bf81a780f73e2bbc8bb39f90edc779987eb422192fb3facb4c0dae78c140cacb787
-
SSDEEP
24576:FSfBk+9Zl7pC4HE+Y/lU/Z46vVJkWuQpJ53am1u46FxVDmdVxoejIF4UAVddHctD:6kFhgJ8m1u/CVxodFSfd+WC9J
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 7 IoCs
description pid Process procid_target PID 2208 wrote to memory of 1744 2208 rundll32.exe 28 PID 2208 wrote to memory of 1744 2208 rundll32.exe 28 PID 2208 wrote to memory of 1744 2208 rundll32.exe 28 PID 2208 wrote to memory of 1744 2208 rundll32.exe 28 PID 2208 wrote to memory of 1744 2208 rundll32.exe 28 PID 2208 wrote to memory of 1744 2208 rundll32.exe 28 PID 2208 wrote to memory of 1744 2208 rundll32.exe 28