1aaa3b9ac49370a52a183cabc00f52c56df9e3dc03e3c33808e945ad0e7650eb | Triage

Analysis

max time kernel
140s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20231020-en
resource tags

arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system
submitted
07-11-2023 13:52

Sharing

Report Analysis Logs

General

Target

bindevt.dll
Size

52KB
MD5

96666a23da9d03cd58685e84a1603ba8
SHA1

89f2d8ac4f2fcf3579883d286dfa3ddf11518a14
SHA256

848c81ee9c78c4f1f394063bf27df308770b7beed1375eab804a252529529c1e
SHA512

0f96b88bdf9f75046ab9acdbd1a23b23f61288ffb37183748024cd8757953ffa0da962d80fb39ceb6075503c169d8bfe5db349dcff27d3a0ded9e4c88bf4f74d
SSDEEP

768:9XTQ3dz80P3mkj0wWyRepPVJuiNdVtPw:9X4HVj0wWyEB5tP

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2684 wrote to memory of 2392	2684	rundll32.exe	86
PID 2684 wrote to memory of 2392	2684	rundll32.exe	86
PID 2684 wrote to memory of 2392	2684	rundll32.exe	86

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\bindevt.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2684
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\bindevt.dll,#1
  2⤵
  PID:2392

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads