206cf5716979adf1932b86b7c96d3026afab577df98e50427665b8d15e81f392 | Triage

Analysis

max time kernel
145s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
19/01/2024, 01:55

Sharing

Report Analysis Logs

General

Target

6697702bdf8509ece5bccdcb20b85f6e.dll
Size

34KB
MD5

6697702bdf8509ece5bccdcb20b85f6e
SHA1

7456fae4e1c42bc153c8c328051e4474b128466a
SHA256

206cf5716979adf1932b86b7c96d3026afab577df98e50427665b8d15e81f392
SHA512

3c8b911fe5f2830f369a43b247c751ca43ce5170c305c589e154ee3a56a6bd57e2d533e0c46571d61225dee0c8a88c2a0263e8161f58195aa8e11e880717594b
SSDEEP

768:WbOhTLYMpXQ3T3YNrZr//7WvkZCOqhnPmRZnX:+OhTPN/Nr17WvHpORZX

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 4904 wrote to memory of 4644	4904	rundll32.exe	12
PID 4904 wrote to memory of 4644	4904	rundll32.exe	12
PID 4904 wrote to memory of 4644	4904	rundll32.exe	12

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6697702bdf8509ece5bccdcb20b85f6e.dll,#1
1⤵
PID:4644

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\6697702bdf8509ece5bccdcb20b85f6e.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:4904

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads