958f0d2e8848dc1e1a9d6dd3eed262d6f98bf722da5a75585a31a228702e6863 | Triage

Analysis

max time kernel
147s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
31/12/2023, 12:58

Sharing

Report Analysis Logs

General

Target

370535c72617ccc55d7f351c86e75042.dll
Size

2KB
MD5

370535c72617ccc55d7f351c86e75042
SHA1

723c5b039e429dbbeb70c1c8eb3e34ab910d4f2b
SHA256

958f0d2e8848dc1e1a9d6dd3eed262d6f98bf722da5a75585a31a228702e6863
SHA512

0a01df4c5a62844546aadcafefe8f51b46abf76c4a4392bc23d3d6009d021cc4ba41a86d296036702bad2c3a64582ef85bc822b1d471428e788a6a52ac4cb6ad

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 4552 wrote to memory of 1528	4552	rundll32.exe	39
PID 4552 wrote to memory of 1528	4552	rundll32.exe	39
PID 4552 wrote to memory of 1528	4552	rundll32.exe	39

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\370535c72617ccc55d7f351c86e75042.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:4552
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\370535c72617ccc55d7f351c86e75042.dll,#1
  2⤵
  PID:1528

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1528-0-0x0000000010000000-0x0000000010003000-memory.dmp

Filesize
12KB

Download