2d8b9ab35f55683cfd7ae90548f297754c4a92741e6ac9e7de5d5b7fb8078061 | Triage

Analysis

max time kernel
143s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20231020-en
resource tags

arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system
submitted
21/10/2023, 21:25

Sharing

Report Analysis Logs

General

Target

NEAS.8d11aaa8116cbbf5942e286409119380.dll
Size

3KB
MD5

8d11aaa8116cbbf5942e286409119380
SHA1

621e563fabd8136532269157956b80c125e6f67d
SHA256

2d8b9ab35f55683cfd7ae90548f297754c4a92741e6ac9e7de5d5b7fb8078061
SHA512

53eb912cce75f5105cd2101e80fefc3cbd9cda67fc5cbd009b19f94bc43fad575d914abf0d4993b1f70d4997349040f9bb428c0709e8ce45576af468c3149b2d

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1752 wrote to memory of 1796	1752	rundll32.exe	85
PID 1752 wrote to memory of 1796	1752	rundll32.exe	85
PID 1752 wrote to memory of 1796	1752	rundll32.exe	85

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\NEAS.8d11aaa8116cbbf5942e286409119380.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:1752
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\NEAS.8d11aaa8116cbbf5942e286409119380.dll,#1
  2⤵
  PID:1796

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads