73eb7641bbaebcd342c70732dc3a0b48af4f83e134f3ae14b7c9a542554a2c16 | Triage

Analysis

max time kernel
97s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20231222-en
resource tags

arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
submitted
25/12/2023, 23:07

Sharing

Report Analysis Logs

General

Target

423d2d08fa5e31987f9ed8259b4b9eb5.dll
Size

71KB
MD5

423d2d08fa5e31987f9ed8259b4b9eb5
SHA1

d1fd5adbd80249531dd7dcfc231ebb69751fa5b5
SHA256

73eb7641bbaebcd342c70732dc3a0b48af4f83e134f3ae14b7c9a542554a2c16
SHA512

ae9e56ed071c8b4a791c17b5989c8f7d60d14c0dcc52726e8140e888b993f495bd105dd357d148efca0538bac3bf352acfe00ce6d8cf917c08671199dae7b83c
SSDEEP

1536:4GEs21Rxa+CvV3X8TCcKMggvSW0+xUbgL:4M21K+WV3X8TrOgvC+xUI

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 4616 wrote to memory of 3132	4616	rundll32.exe	14
PID 4616 wrote to memory of 3132	4616	rundll32.exe	14
PID 4616 wrote to memory of 3132	4616	rundll32.exe	14

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\423d2d08fa5e31987f9ed8259b4b9eb5.dll,#1
1⤵
PID:3132

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\423d2d08fa5e31987f9ed8259b4b9eb5.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:4616

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads