21bdfbba428eaf3388203c06b3abd07a0549a55d1960d52f5d921adf9a7b663d | Triage

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
08/01/2024, 08:26

Sharing

Report Analysis Logs

General

Target

4aef6ae262f5a21d7cf90583fa5e8a9f.dll
Size

33KB
MD5

4aef6ae262f5a21d7cf90583fa5e8a9f
SHA1

567f76ddcd3ee09ca923c25274a9219401e20e10
SHA256

21bdfbba428eaf3388203c06b3abd07a0549a55d1960d52f5d921adf9a7b663d
SHA512

9db85ac5cd1f64c88b731b1943eb0e73ed11f5f0f54ae7445e40d8ae16748d12f2b091065552d791dfc8bf673787e0e5a2bd528bb6491360a17e0fcbbfb23195
SSDEEP

768:W56aDLmx9EJweixkTmGpSQdryRSI2uJX8:W56aPmx2JKkT/SIygI0

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 2352 wrote to memory of 2360	2352	rundll32.exe	14
PID 2352 wrote to memory of 2360	2352	rundll32.exe	14
PID 2352 wrote to memory of 2360	2352	rundll32.exe	14
PID 2352 wrote to memory of 2360	2352	rundll32.exe	14
PID 2352 wrote to memory of 2360	2352	rundll32.exe	14
PID 2352 wrote to memory of 2360	2352	rundll32.exe	14
PID 2352 wrote to memory of 2360	2352	rundll32.exe	14

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4aef6ae262f5a21d7cf90583fa5e8a9f.dll,#1
1⤵
PID:2360

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4aef6ae262f5a21d7cf90583fa5e8a9f.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2352

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads