6e00727d5fe960f45ae258582eca96bdba6b7de7085b2076084fcb1e9faa3cf2 | Triage

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
24/12/2023, 15:34

Sharing

Report Analysis Logs

General

Target

03e389d196236da714022f1ffb3c24fa.dll
Size

33KB
MD5

03e389d196236da714022f1ffb3c24fa
SHA1

378575a09b0eeac244803c9785a9ed677437f244
SHA256

6e00727d5fe960f45ae258582eca96bdba6b7de7085b2076084fcb1e9faa3cf2
SHA512

c81070088e9ea5bf1a8a9a2f10fd68466cf914120cc3ca26a081e746e6d78b258ab5282ee2d88686ff32ebd226a666db9bf5b0755e53aedbf69b443d9cbeae97
SSDEEP

768:U9qeula2iuu4enYOE7IOIoSYhqD6RBu6J:U9qeulu4eYj7IOI2kGRB7J

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 1428 wrote to memory of 2104	1428	rundll32.exe	14
PID 1428 wrote to memory of 2104	1428	rundll32.exe	14
PID 1428 wrote to memory of 2104	1428	rundll32.exe	14
PID 1428 wrote to memory of 2104	1428	rundll32.exe	14
PID 1428 wrote to memory of 2104	1428	rundll32.exe	14
PID 1428 wrote to memory of 2104	1428	rundll32.exe	14
PID 1428 wrote to memory of 2104	1428	rundll32.exe	14

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\03e389d196236da714022f1ffb3c24fa.dll,#1
1⤵
PID:2104

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\03e389d196236da714022f1ffb3c24fa.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:1428

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads