45429ff98ecb1b7419db2c948cc0ca22fd50976798fa1c5e4b666ebddf1ee1ba | Triage

Analysis

max time kernel
149s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20231222-en
resource tags

arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
submitted
02/01/2024, 17:18

Sharing

Report Analysis Logs

General

Target

3e8f2452d29f802f7f1ee4a4e72dc3c5.dll
Size

3KB
MD5

3e8f2452d29f802f7f1ee4a4e72dc3c5
SHA1

0c5743867578cda4c1dfb7cb31235615ed33c3df
SHA256

45429ff98ecb1b7419db2c948cc0ca22fd50976798fa1c5e4b666ebddf1ee1ba
SHA512

f863b66ea8022777a7f7684d97abae7b1880cb3375fbe5e98187fe4d3390ed448a4c3997faa3fcb74437f6008b198fe2f6db29d0ff2c2a986377dcebf0510e9f

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 396 wrote to memory of 1012	396	rundll32.exe	14
PID 396 wrote to memory of 1012	396	rundll32.exe	14
PID 396 wrote to memory of 1012	396	rundll32.exe	14

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\3e8f2452d29f802f7f1ee4a4e72dc3c5.dll,#1
1⤵
PID:1012

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\3e8f2452d29f802f7f1ee4a4e72dc3c5.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:396

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads