4e68a591b4ed8ffe693619f7d98b7af388357eaf2d8005cf15b3fb5697fe69ce | Triage

Analysis

max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
26-01-2024 21:41

Sharing

Report Analysis Logs

General

Target

AudioCodec2.dll
Size

244KB
MD5

18412978b0fc0fbe65edf6082518e390
SHA1

c4b1e83db4b3dd86fac9b97b736861af61f31a81
SHA256

2cad343678f71606e5ef225eccf9fed3c4da2edad0f1c2574e5cd2f2be7525a8
SHA512

768f3c31306a78c2146578fbc620ba99c3cb3427b52cacad1102511f290c76c238bc3961c466a6bc9ef79cc0330b5f4186547d1e54ac5e1373bb95bfa5f7674b
SSDEEP

6144:UjnDn6tRH0icgm9o+0feviaDNT0FiGAn4:s6RH03gm9otaU

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1104 wrote to memory of 4800	1104	rundll32.exe	87
PID 1104 wrote to memory of 4800	1104	rundll32.exe	87
PID 1104 wrote to memory of 4800	1104	rundll32.exe	87

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\AudioCodec2.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:1104
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\AudioCodec2.dll,#1
  2⤵
  PID:4800

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads