Analysis
-
max time kernel
122s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
05-01-2024 11:43
Behavioral task
behavioral1
Sample
Loader/Loader.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
Loader/Loader.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
Loader/etc/luIelD.dll
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
Loader/etc/luIelD.dll
Resource
win10v2004-20231222-en
Behavioral task
behavioral5
Sample
Loader/php5ts.dll
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
Loader/php5ts.dll
Resource
win10v2004-20231215-en
General
-
Target
Loader/etc/luIelD.dll
-
Size
2.9MB
-
MD5
4752c15e18992f946e5d22ac017afe65
-
SHA1
783110dbfc5598a773265ee925df6f2814e89ce4
-
SHA256
215931f9665cc1e3d195579c26269fd91075a81937e539e95aeb3a36d401ba8d
-
SHA512
3d2d4e9b46ad2570536b1281f385d877f03f2fc7aff34d6fb206d7eefa8a9e629b81cfc48fe949420040253eed8a7d8cb1458f714ecf1f6159368969316811c6
-
SSDEEP
49152:P+4TMh932FULUE/xuMWaPFkpI7D0C2LyEi:PHMhYFUJ/vUGwO
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 7 IoCs
description pid Process procid_target PID 1440 wrote to memory of 2168 1440 rundll32.exe 16 PID 1440 wrote to memory of 2168 1440 rundll32.exe 16 PID 1440 wrote to memory of 2168 1440 rundll32.exe 16 PID 1440 wrote to memory of 2168 1440 rundll32.exe 16 PID 1440 wrote to memory of 2168 1440 rundll32.exe 16 PID 1440 wrote to memory of 2168 1440 rundll32.exe 16 PID 1440 wrote to memory of 2168 1440 rundll32.exe 16