aee5b92a7c58164f5a42cbd3c605251c73480e197737eed2a208b71be3a0f1eb | Triage

Analysis

max time kernel
182s
max time network
189s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
25-12-2023 05:59

Sharing

Report Analysis Logs

General

Target

09e4d0765a38f6c532e0909e3950a3ce.dll
Size

3KB
MD5

09e4d0765a38f6c532e0909e3950a3ce
SHA1

8ac9e53de86582f479a3254726d5dd70e79bd559
SHA256

aee5b92a7c58164f5a42cbd3c605251c73480e197737eed2a208b71be3a0f1eb
SHA512

9756941083fd6e049be92d4eb05197af54cbbce3756ebff1c23a606a651f0747a619b963de228c4af357a2c6cc52bdd6bbbb5451e91917928b9523c658535f72

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1700 wrote to memory of 3324	1700	rundll32.exe	90
PID 1700 wrote to memory of 3324	1700	rundll32.exe	90
PID 1700 wrote to memory of 3324	1700	rundll32.exe	90

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\09e4d0765a38f6c532e0909e3950a3ce.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:1700
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\09e4d0765a38f6c532e0909e3950a3ce.dll,#1
  2⤵
  PID:3324

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads