9ad6d6a402846803ec4d683f8ce35246537937258007cb042383a8cf62aa9d51 | Triage

Analysis

max time kernel
152s
max time network
161s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
26/12/2023, 02:40

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

4d4db8ebcd23d19bc37083150deb6a38.dll
Size

3KB
MD5

4d4db8ebcd23d19bc37083150deb6a38
SHA1

dc195fb1bc64b70f86379a0a850117fbe78d61b2
SHA256

9ad6d6a402846803ec4d683f8ce35246537937258007cb042383a8cf62aa9d51
SHA512

25ef9ad04c4693dac238a6267f0f9b9554498966e3bd31b4ba830edd18d2a0be51b522f1a33b7fa25c22f5ccd861ec01e21da9a0c171aad31446243404209f85

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 5056 wrote to memory of 1620	5056	rundll32.exe	17
PID 5056 wrote to memory of 1620	5056	rundll32.exe	17
PID 5056 wrote to memory of 1620	5056	rundll32.exe	17

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4d4db8ebcd23d19bc37083150deb6a38.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:5056
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\4d4db8ebcd23d19bc37083150deb6a38.dll,#1
  2⤵
  PID:1620

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads