30cf20bfa873ef4671e3c42c930989f7b6a530d8fc53a94b6ccd6f096770f5a8 | Triage

Analysis

max time kernel
93s
max time network
146s
platform
windows10-2004_x64
resource
win10v2004-20231222-en
resource tags

arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
submitted
26/12/2023, 01:16

Sharing

Report Analysis Logs

General

Target

48923d98acfe02b89d88029813a080cd.dll
Size

3KB
MD5

48923d98acfe02b89d88029813a080cd
SHA1

e84e4d69eed0fa05e948dec8dec8e032045e0cde
SHA256

30cf20bfa873ef4671e3c42c930989f7b6a530d8fc53a94b6ccd6f096770f5a8
SHA512

04fe6ae7b1c79a02b0054bddef00a8c814f0a51829d508f9bfa8c167c12ddc8cb02adb6e0858c91eb1a36a9ff2adc808823868b8b4a331adf52f2a259375b50b

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 4840 wrote to memory of 4504	4840	rundll32.exe	52
PID 4840 wrote to memory of 4504	4840	rundll32.exe	52
PID 4840 wrote to memory of 4504	4840	rundll32.exe	52

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\48923d98acfe02b89d88029813a080cd.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:4840
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\48923d98acfe02b89d88029813a080cd.dll,#1
  2⤵
  PID:4504

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads