8bbbc90c7d4451d9b4ec34dc60b6f7b47176a135321adf46c947a7a22d93ec73 | Triage

Analysis

max time kernel
138s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
26-12-2023 14:56

Sharing

Report Analysis Logs

General

Target

774a4effc067d11a0ca56c3f042edd4e.dll
Size

6KB
MD5

774a4effc067d11a0ca56c3f042edd4e
SHA1

fd77512ca0ac7a3530ee75e87662ca096a2b5f5e
SHA256

8bbbc90c7d4451d9b4ec34dc60b6f7b47176a135321adf46c947a7a22d93ec73
SHA512

1a1a56dcee87bab3165e30b0b744f9a7ac88399026ce4da2910e575262c28b01c550e7302b3b5d01170e09dea539ae5fad7877cedc3f40cd0008f111f047d3fa
SSDEEP

48:6AA35YVOQDV8FszwydlAYsLFV3G0iB+BDq9J5S2:0QDV8FscMjsLFV3KB+FqX5S2

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2132 wrote to memory of 2536	2132	rundll32.exe	14
PID 2132 wrote to memory of 2536	2132	rundll32.exe	14
PID 2132 wrote to memory of 2536	2132	rundll32.exe	14

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\774a4effc067d11a0ca56c3f042edd4e.dll,#1
1⤵
PID:2536

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\774a4effc067d11a0ca56c3f042edd4e.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2132

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads