34c5b469970ebf022615ff08a8efb16fd0bf6283d2a11cb38f70a2b2821516cc | Triage

Analysis

max time kernel
145s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
25/12/2023, 15:41

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

2a171d81d0e397c814cff5b69d64f291.dll
Size

2KB
MD5

2a171d81d0e397c814cff5b69d64f291
SHA1

12182ee1165ec2ee3e3067ab2ca245ebdc3593c7
SHA256

34c5b469970ebf022615ff08a8efb16fd0bf6283d2a11cb38f70a2b2821516cc
SHA512

1f28b866842f686a4e3e792b94a8e460c38ded949effa444fcd9c8675508af21f9a36c0da6d441cd06564c12c8505eb7724d5af5df90383ab634590313fa4d33

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 4180 wrote to memory of 4380	4180	rundll32.exe	86
PID 4180 wrote to memory of 4380	4180	rundll32.exe	86
PID 4180 wrote to memory of 4380	4180	rundll32.exe	86

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2a171d81d0e397c814cff5b69d64f291.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:4180
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\2a171d81d0e397c814cff5b69d64f291.dll,#1
  2⤵
  PID:4380

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads