184db53cf8264b6d5c6f7fd61c100db8b8b963b5ea549659eed0342b586f9459 | Triage

Analysis

max time kernel
122s
max time network
135s
platform
windows10-2004_x64
resource
win10v2004-20231023-en
resource tags

arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system
submitted
07-11-2023 13:49

Sharing

Report Analysis Logs

General

Target

libeay32.dll
Size

1008KB
MD5

9b982710a85a826f80da7a4735d25986
SHA1

10209f64fbac350613db4c22ec077fed9eb25c5c
SHA256

2e653459595ca751170403d81e624a168419e41ea4dcfbc9a308ab2c7c70a437
SHA512

6f53a0013a790f84f87270ef2636e152a3b277a0e2d771d076778b404fb9d57e1e1aca05ecffc29c955b2f0be5bdf28ffd7c5b6a52f1b3c12481e3be443ff27c
SSDEEP

24576:HHcCWxpMeGy9XjvUCFxhk3e/p+nkmC+EbqU:HH4ezydNFIoppm1Gf

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1548 wrote to memory of 3784	1548	rundll32.exe	83
PID 1548 wrote to memory of 3784	1548	rundll32.exe	83
PID 1548 wrote to memory of 3784	1548	rundll32.exe	83

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\libeay32.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:1548
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\libeay32.dll,#1
  2⤵
  PID:3784

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads