1546f8e9257db1c4336184caaf332c710b302703f60527b6640c25a4df695f5d | Triage

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
11/01/2024, 13:37

Sharing

Report Analysis Logs

General

Target

53a99f633174b02d9652a773c1252b03.dll
Size

33KB
MD5

53a99f633174b02d9652a773c1252b03
SHA1

2449fce9052287a95f1e01ae10fdebf8a3fee1d3
SHA256

1546f8e9257db1c4336184caaf332c710b302703f60527b6640c25a4df695f5d
SHA512

5eaa7889222ee6a4b7508f0c89d71f56e00ea107f34a3bdbe2ee73b66bb8e0252c2ed7e5ad1e6c823004958bbb745466e903d32fbaa990fefdecc6e166de4b5b
SSDEEP

768:re4TH/zy0W5defiInLF5a/nAC+JLyrUUk/g:64fzyD5aiIZ5a/ACCCF3

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 1948 wrote to memory of 2080	1948	rundll32.exe	14
PID 1948 wrote to memory of 2080	1948	rundll32.exe	14
PID 1948 wrote to memory of 2080	1948	rundll32.exe	14
PID 1948 wrote to memory of 2080	1948	rundll32.exe	14
PID 1948 wrote to memory of 2080	1948	rundll32.exe	14
PID 1948 wrote to memory of 2080	1948	rundll32.exe	14
PID 1948 wrote to memory of 2080	1948	rundll32.exe	14

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\53a99f633174b02d9652a773c1252b03.dll,#1
1⤵
PID:2080

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\53a99f633174b02d9652a773c1252b03.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:1948

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads