a7880ad19079bc3bd39c06ded2a177cc9ebc0b5674ea50570012ae8d7eb8a2f4 | Triage

Analysis

max time kernel
134s
max time network
136s
platform
windows10-2004_x64
resource
win10v2004-20231222-en
resource tags

arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
submitted
01/01/2024, 23:46

Sharing

Report Analysis Logs

General

Target

3e2d06589878f81bbf6fe7e64c4c23b8.dll
Size

3KB
MD5

3e2d06589878f81bbf6fe7e64c4c23b8
SHA1

8a982a4a7ae018960af1a746a9091404e1f53319
SHA256

a7880ad19079bc3bd39c06ded2a177cc9ebc0b5674ea50570012ae8d7eb8a2f4
SHA512

7d8898d08116abbd2ca5c709d6a635e615412b0e6aaec7f84dd2925a72d2e39abdb6701fbd54c43aae3603f2491de62bd7a55fc72d01f7e4b0a95e33f3bca5c3

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 4556 wrote to memory of 1352	4556	rundll32.exe	16
PID 4556 wrote to memory of 1352	4556	rundll32.exe	16
PID 4556 wrote to memory of 1352	4556	rundll32.exe	16

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\3e2d06589878f81bbf6fe7e64c4c23b8.dll,#1
1⤵
PID:1352

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\3e2d06589878f81bbf6fe7e64c4c23b8.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:4556

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads