c9a2ff55a2eaf4d4332ba2430ddda4d93b6b5034e8048112e6886b5afe7a0f97 | Triage

Analysis

max time kernel
119s
max time network
122s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
24-01-2024 11:09

Sharing

Report Analysis Logs

General

Target

721344f55179c07fd9ac76917c46bcbe.dll
Size

3KB
MD5

721344f55179c07fd9ac76917c46bcbe
SHA1

8bec7969df5e54401f9e0c12f59e00c33192f9f3
SHA256

c9a2ff55a2eaf4d4332ba2430ddda4d93b6b5034e8048112e6886b5afe7a0f97
SHA512

d7d1836ff143d69e34e15d2f4258b6ff40c4d8f67c77ee27f5183f9a03808fb888e767349e603cd046fa24907cffd4bff57fc55c94cdb968405f20242d1c4462

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 2240 wrote to memory of 1040	2240	rundll32.exe	28
PID 2240 wrote to memory of 1040	2240	rundll32.exe	28
PID 2240 wrote to memory of 1040	2240	rundll32.exe	28
PID 2240 wrote to memory of 1040	2240	rundll32.exe	28
PID 2240 wrote to memory of 1040	2240	rundll32.exe	28
PID 2240 wrote to memory of 1040	2240	rundll32.exe	28
PID 2240 wrote to memory of 1040	2240	rundll32.exe	28

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\721344f55179c07fd9ac76917c46bcbe.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2240
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\721344f55179c07fd9ac76917c46bcbe.dll,#1
  2⤵
  PID:1040

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads