429ee2644a693084be60d9a1198036c81d5e2fe2289fbb0db9b4d24751580ad1 | Triage

Analysis

max time kernel
91s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20231222-en
resource tags

arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
submitted
24/12/2023, 17:20

Sharing

Report Analysis Logs

General

Target

081a2cf2b55663ab57eb41eeecc1e03d.dll
Size

98KB
MD5

081a2cf2b55663ab57eb41eeecc1e03d
SHA1

09479d3abd41f1b284b94d19b93f35af54b95dec
SHA256

429ee2644a693084be60d9a1198036c81d5e2fe2289fbb0db9b4d24751580ad1
SHA512

d6f1582d4daa3ba6ea3ecf92224e0378fa8822968182148f491d2806fd1e066a36382bca88ac1978b65f722c1c1cda46fe1f3ca851c309a653d5a30c1ce25fbd
SSDEEP

3072:vL7ijM0KG0b437pV4BqDSZk0sdra2symfSlo8:jWRKVb43qaaRT1fSlp

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/1256-0-0x0000000010000000-0x000000001002C000-memory.dmp	upx

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4024	1256	WerFault.exe	86

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2692 wrote to memory of 1256	2692	rundll32.exe	86
PID 2692 wrote to memory of 1256	2692	rundll32.exe	86
PID 2692 wrote to memory of 1256	2692	rundll32.exe	86

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\081a2cf2b55663ab57eb41eeecc1e03d.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2692
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\081a2cf2b55663ab57eb41eeecc1e03d.dll,#1
  2⤵
  PID:1256
- - C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -u -p 1256 -s 548
    3⤵
    - Program crash
    PID:4024

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 412 -p 1256 -ip 1256
1⤵
PID:2760

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1256-0-0x0000000010000000-0x000000001002C000-memory.dmp

Filesize
176KB

Download