17eb3f58bf97f418b4eb572a358d99955d4601d078a17b18d957eba0b3ad6dfe | Triage

Analysis

max time kernel
148s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
30/12/2023, 00:48

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

090ac9205dba8de581b7182eedb349a3.dll
Size

3KB
MD5

090ac9205dba8de581b7182eedb349a3
SHA1

c92168f391aae8a3b82f99d934b8739c6f2e28a2
SHA256

17eb3f58bf97f418b4eb572a358d99955d4601d078a17b18d957eba0b3ad6dfe
SHA512

9beebea63a37d5e70f5120d2c054438816061dbb678b433a60e18396a5ceae6c6f56accb5f0b12e55405dfa83ea96214b22c734a1f8ee3adae5c297badaec829

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1176 wrote to memory of 1212	1176	rundll32.exe	14
PID 1176 wrote to memory of 1212	1176	rundll32.exe	14
PID 1176 wrote to memory of 1212	1176	rundll32.exe	14

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\090ac9205dba8de581b7182eedb349a3.dll,#1
1⤵
PID:1212

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\090ac9205dba8de581b7182eedb349a3.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:1176

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads