2d13cfe57a3b41e9d5a8f185de9436a197dbfb21545c9fda9fdc1ba9e58be4eb | Triage

Analysis

max time kernel
113s
max time network
89s
platform
windows10-2004_x64
resource
win10v2004-20231222-en
resource tags

arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
submitted
26/12/2023, 00:21

Sharing

Report Analysis Logs

General

Target

4607008eeb7c074f11b37eb0e739fb0b.dll
Size

34KB
MD5

4607008eeb7c074f11b37eb0e739fb0b
SHA1

c670afd528bacf35a0ae842e2930b44f7b9f86a3
SHA256

2d13cfe57a3b41e9d5a8f185de9436a197dbfb21545c9fda9fdc1ba9e58be4eb
SHA512

8bbed5bfa24e2885ccebc84bd4c449e02d1223146f9fa57a5e27d70b9b44d95b3a87ea8ab4d2f284d47a98d8eca64fc90161684689a85293f828df840960b5fc
SSDEEP

768:azJaEYX84a6AEprnYpbyrHWN3NfhCgmnTEDO3vycUk:WPEBfuJCjMk

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 3984 wrote to memory of 3924	3984	rundll32.exe	16
PID 3984 wrote to memory of 3924	3984	rundll32.exe	16
PID 3984 wrote to memory of 3924	3984	rundll32.exe	16

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4607008eeb7c074f11b37eb0e739fb0b.dll,#1
1⤵
PID:3924

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4607008eeb7c074f11b37eb0e739fb0b.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:3984

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads