30b611c7d621d6f8858971f07fe34380f3939fd9ae1d510d121d53e9f6d2501b | Triage

Analysis

max time kernel
117s
max time network
123s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
26-12-2023 02:37

Sharing

Report Analysis Logs

General

Target

4d2215372e8624cb24b3fa3affb546dc.dll
Size

6KB
MD5

4d2215372e8624cb24b3fa3affb546dc
SHA1

7276ecedcc5255fd13be6eedba61b14f9a15c780
SHA256

30b611c7d621d6f8858971f07fe34380f3939fd9ae1d510d121d53e9f6d2501b
SHA512

967fc7abc7975f74d15df34f3cebeb25a60386ab33de730072b8b57f457f1532aeefe00e8eb749008dd7475e9e886f89f6c739dfbc0fe08a6d1d335571bce4d3
SSDEEP

48:63mll5YVOa9VUX1iwbQWu0+B+BDq9J5SH:VDa9VUX9bQWeB+FqX5SH

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 2224 wrote to memory of 2208	2224	rundll32.exe	1
PID 2224 wrote to memory of 2208	2224	rundll32.exe	1
PID 2224 wrote to memory of 2208	2224	rundll32.exe	1
PID 2224 wrote to memory of 2208	2224	rundll32.exe	1
PID 2224 wrote to memory of 2208	2224	rundll32.exe	1
PID 2224 wrote to memory of 2208	2224	rundll32.exe	1
PID 2224 wrote to memory of 2208	2224	rundll32.exe	1

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4d2215372e8624cb24b3fa3affb546dc.dll,#1
1⤵
PID:2208

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4d2215372e8624cb24b3fa3affb546dc.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2224

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads