661a4c00825cee7ee2693eafbe77e6876e70147b47bc6c62e53e7c97136937b4 | Triage

Analysis

max time kernel
92s
max time network
96s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
25/01/2024, 23:35

Sharing

Report Analysis Logs

General

Target

3DM4.83/DXRender_4.dll
Size

69KB
MD5

fa7299b525ead1c8ffb5709d55e8d385
SHA1

64691bc12a8e6e084f0cc66c35d7f30a5ebe2106
SHA256

80065425728a1d654bf7362a46160db1b297221cc50e89199ed6764a521a256d
SHA512

e2c730c48b73181133bf0192df18779c676d7f109c161d8b3778aaca51f2a55eef93ba38a1ded0305c28143c9f5d3ee79e6c0202ac6c72fdd1d0102a7df53a81
SSDEEP

1536:2KNIrxE+vSAQ4gKX6wY9BNW1IbRKGek3xhsB:2IexE+vZavW1IRKGekbsB

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 4916 wrote to memory of 1456	4916	rundll32.exe	19
PID 4916 wrote to memory of 1456	4916	rundll32.exe	19
PID 4916 wrote to memory of 1456	4916	rundll32.exe	19

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\3DM4.83\DXRender_4.dll,#1
1⤵
PID:1456

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\3DM4.83\DXRender_4.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:4916

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads