9768d9891fc869203af490862b81f8beae2d255e13f6e361e49e0b49ed9c26b6 | Triage

Analysis

max time kernel
121s
max time network
125s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
25/01/2024, 17:39

Sharing

Report Analysis Logs

General

Target

751dc942d469c113c3f5fdf557b58c67.dll
Size

32KB
MD5

751dc942d469c113c3f5fdf557b58c67
SHA1

5a1699e615b1c06303c1a692a7a7bd3efdd5b07b
SHA256

9768d9891fc869203af490862b81f8beae2d255e13f6e361e49e0b49ed9c26b6
SHA512

61331cc9caae19856d99e10062794765e1876ef03ea3dd2a257af9c782874af499f29756e2dd555ece1469bf713ab1fa759862ff1ba2c5b84d65cb90fff8b78d
SSDEEP

768:mHLEjXqOcy48wA+LkoqW8lyTxkw9U2p26wbzC5T:mWaC+Ltq1lyTCM8nzy

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 2280 wrote to memory of 2368	2280	rundll32.exe	28
PID 2280 wrote to memory of 2368	2280	rundll32.exe	28
PID 2280 wrote to memory of 2368	2280	rundll32.exe	28
PID 2280 wrote to memory of 2368	2280	rundll32.exe	28
PID 2280 wrote to memory of 2368	2280	rundll32.exe	28
PID 2280 wrote to memory of 2368	2280	rundll32.exe	28
PID 2280 wrote to memory of 2368	2280	rundll32.exe	28

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\751dc942d469c113c3f5fdf557b58c67.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2280
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\751dc942d469c113c3f5fdf557b58c67.dll,#1
  2⤵
  PID:2368

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads