Analysis
-
max time kernel
147s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
26-12-2023 00:49
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
4783c3c64214cb1d3efd7e0526562dca.dll
Resource
win7-20231215-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
4783c3c64214cb1d3efd7e0526562dca.dll
Resource
win10v2004-20231222-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
4783c3c64214cb1d3efd7e0526562dca.dll
-
Size
6KB
-
MD5
4783c3c64214cb1d3efd7e0526562dca
-
SHA1
ded54c72720702575e86c30c1be3fbbcc941fe70
-
SHA256
9a60bb31c37b66c56429d93a09876b2f73800d0966dea4613fcb6d1fe218071d
-
SHA512
ff217474fb936b42e69f2018b384d1305914e8146f7ec678922ec7ab828b747670dde9bcdf9045b6c18d91b9a0d0789587e121410a0a3cd176ab3c2228c38490
-
SSDEEP
48:63mll5YVOa9VUX1iwbQWu0PB+BDq9J5SH:VDa9VUX9bQWvB+FqX5SH
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 1984 wrote to memory of 2828 1984 rundll32.exe 14 PID 1984 wrote to memory of 2828 1984 rundll32.exe 14 PID 1984 wrote to memory of 2828 1984 rundll32.exe 14
Processes
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\4783c3c64214cb1d3efd7e0526562dca.dll,#11⤵PID:2828
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\4783c3c64214cb1d3efd7e0526562dca.dll,#11⤵
- Suspicious use of WriteProcessMemory
PID:1984