15743b6ae2c98116da9145632ab0879770c9d7e0481375917f6f3e7de852bcc3 | Triage

Analysis

max time kernel
146s
max time network
135s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
25/12/2023, 13:19

Sharing

Report Analysis Logs

General

Target

2134ecc10474ee6173422cad49c7b405.dll
Size

155KB
MD5

2134ecc10474ee6173422cad49c7b405
SHA1

c26646968396ce1b50fadae98b19dc32cc6e983f
SHA256

15743b6ae2c98116da9145632ab0879770c9d7e0481375917f6f3e7de852bcc3
SHA512

ab54a2534c83307b9004cf1cfd2f7a95a00c14317139f3dd0fd1e6e7a9097c1e17bf394dba98a45414a2c2381028ba025d7a76915df1860820d21c7e6d1fd4b3
SSDEEP

3072:WhdzikO4L8snFs8xHH+YwYaB6CsSLJuKZKbZz:Wh1n8sK8xnXiHJVJKb9

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 4136 wrote to memory of 4420	4136	rundll32.exe	14
PID 4136 wrote to memory of 4420	4136	rundll32.exe	14
PID 4136 wrote to memory of 4420	4136	rundll32.exe	14

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2134ecc10474ee6173422cad49c7b405.dll,#1
1⤵
PID:4420

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2134ecc10474ee6173422cad49c7b405.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:4136

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads