Analysis
-
max time kernel
145s -
max time network
164s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
01/01/2024, 11:09
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
3cb12d330c1fdc77a9617f5e809530e7.dll
Resource
win7-20231129-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
3cb12d330c1fdc77a9617f5e809530e7.dll
Resource
win10v2004-20231215-en
2 signatures
150 seconds
General
-
Target
3cb12d330c1fdc77a9617f5e809530e7.dll
-
Size
87KB
-
MD5
3cb12d330c1fdc77a9617f5e809530e7
-
SHA1
23b3f8a19feaa6be6d63ad9786c6d8709df27da1
-
SHA256
8b9a1ee415f4b507628f89476bb31429fd2b3348a846cfb3d1431efa0bb66082
-
SHA512
51865ec8f48c4093cf30a3bb64f02396ea65cc5f78177516cbf26c1f774c8fa158178645715782dd348c7db4598d8e59deb0b61e85145d0c70e2b875cacaae32
-
SSDEEP
1536:Ni+qPA7wPKAnbOleA+DrUbCg4L5Yoc5ADyRZ7DzUrf2qY2uAqfGcec3cagRHP:kPVKAn6le7Doeg4LyocDtDzaruKc3caU
Score
1/10
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2560 rundll32.exe -
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 2288 wrote to memory of 2560 2288 rundll32.exe 88 PID 2288 wrote to memory of 2560 2288 rundll32.exe 88 PID 2288 wrote to memory of 2560 2288 rundll32.exe 88
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cb12d330c1fdc77a9617f5e809530e7.dll,#11⤵
- Suspicious use of WriteProcessMemory
PID:2288 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3cb12d330c1fdc77a9617f5e809530e7.dll,#12⤵
- Suspicious use of SetWindowsHookEx
PID:2560
-