0e24b8e9026309ce107cc22c3e37d189b3491a500c0282e029da324733772051 | Triage

Analysis

max time kernel
139s
max time network
113s
platform
windows10-2004_x64
resource
win10v2004-20231222-en
resource tags

arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
submitted
06-01-2024 08:24

Sharing

Report Analysis Logs

General

Target

Plugins/Fusion_Fix.dll
Size

52KB
MD5

d1a1b127c438afeb04e0970b209cd3d7
SHA1

aefaf7568af569807971d0811e9bb2f3881bbb41
SHA256

b673623ccf160e8877d7d120c2b943c956194ceb25a860323905031a36ff577b
SHA512

ac78318f3f2653c406433a48aa7236fb6e55a4178d989ae70413f1f0ed9f4c840646ee57e0b5541fdf4394f97fc69e90bc55cc207b48439010ab50b9b5f0ccbc
SSDEEP

768:Z7QZ+CmgSVdMdXGaphIoMRPZ5ZZp7Qtw:Z7fHMoaHI3/at

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1636 wrote to memory of 228	1636	rundll32.exe	14
PID 1636 wrote to memory of 228	1636	rundll32.exe	14
PID 1636 wrote to memory of 228	1636	rundll32.exe	14

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\Plugins\Fusion_Fix.dll,#1
1⤵
PID:228

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\Plugins\Fusion_Fix.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:1636

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads