251d7f44ded406ce3b8a468185032ffc580a05ecf315fd00535c1b0b0eefe450 | Triage

Analysis

max time kernel
120s
max time network
122s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
30/12/2023, 01:15

Sharing

Report Analysis Logs

General

Target

09c45670675b99882c9946d109df977b.dll
Size

13KB
MD5

09c45670675b99882c9946d109df977b
SHA1

beb371392b3ab03474a9eef957983e686c088d81
SHA256

251d7f44ded406ce3b8a468185032ffc580a05ecf315fd00535c1b0b0eefe450
SHA512

3d4a85eaca213f1c07b142863c9128724939461f65e5cfaeb3aaceabd321238b0353dfde3c479fe51031608e8ab75ca7a6bf6a0010d63bad9bf00eb897e2806b
SSDEEP

384:UEARz/NoQJ4rVht9tjOXVVsdmQuayHQL0:q/NJKht9tVdgQ4

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1728	rundll32.exe

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 2276 wrote to memory of 1728	2276	rundll32.exe	16
PID 2276 wrote to memory of 1728	2276	rundll32.exe	16
PID 2276 wrote to memory of 1728	2276	rundll32.exe	16
PID 2276 wrote to memory of 1728	2276	rundll32.exe	16
PID 2276 wrote to memory of 1728	2276	rundll32.exe	16
PID 2276 wrote to memory of 1728	2276	rundll32.exe	16
PID 2276 wrote to memory of 1728	2276	rundll32.exe	16

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\09c45670675b99882c9946d109df977b.dll,#1
1⤵
- Suspicious use of SetWindowsHookEx
PID:1728

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\09c45670675b99882c9946d109df977b.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2276

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads