6d5cf5d600a8751e3afb1d277208434cdc078b2cbe6b7083f00efe4792208eba | Triage

Analysis

max time kernel
146s
max time network
114s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
30-12-2023 00:50

Sharing

Report Analysis Logs

General

Target

09192aa460643a261dc9515f44040a97.dll
Size

3KB
MD5

09192aa460643a261dc9515f44040a97
SHA1

4471bcf79945a7cb7b6b94795462d195da8e71d1
SHA256

6d5cf5d600a8751e3afb1d277208434cdc078b2cbe6b7083f00efe4792208eba
SHA512

c4c491fc8f485eab4401464dba1e12542371e257adaf991c447ffb46d10fe028eca5f4eec893c9ff19dde85b73d9c9c4a8114a5d427afd1b09b1c04a59eed0fa

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1516 wrote to memory of 776	1516	rundll32.exe	66
PID 1516 wrote to memory of 776	1516	rundll32.exe	66
PID 1516 wrote to memory of 776	1516	rundll32.exe	66

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\09192aa460643a261dc9515f44040a97.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:1516
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\09192aa460643a261dc9515f44040a97.dll,#1
  2⤵
  PID:776

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads