2d9a022284aaea51c309b0a078b9547cd273dab1df41136a8fb0b1c779a9f500 | Triage

Analysis

max time kernel
145s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20231222-en
resource tags

arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
submitted
29/01/2024, 09:34

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

7f7f37de34d1d747d15ab47831f82237.dll
Size

6KB
MD5

7f7f37de34d1d747d15ab47831f82237
SHA1

6575af0c490996c2873068f733d33e7e0a7411fc
SHA256

2d9a022284aaea51c309b0a078b9547cd273dab1df41136a8fb0b1c779a9f500
SHA512

c8bd61eab39fd0e28353dd4cc1174662430ccdac90fedcd63cc3f6255cb47670aa4defdf2a75d339cdbdd2acf4df6352465cddb4986b8f85856bdfd5bbb8037c
SSDEEP

48:63mll5YVOa9VUX1iwbQWu0NB+BDq9J5SH:VDa9VUX9bQWtB+FqX5SH

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2572 wrote to memory of 1844	2572	rundll32.exe	14
PID 2572 wrote to memory of 1844	2572	rundll32.exe	14
PID 2572 wrote to memory of 1844	2572	rundll32.exe	14

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\7f7f37de34d1d747d15ab47831f82237.dll,#1
1⤵
PID:1844

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\7f7f37de34d1d747d15ab47831f82237.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2572

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads