cdcab9a3b4610c8734320fb46da896595c2de1bb29fc5b038264e3a01cc41671 | Triage

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
03/02/2024, 20:34

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

8d47cde53372d1041513537995f32ddb.dll
Size

72KB
MD5

8d47cde53372d1041513537995f32ddb
SHA1

cd2fe3e7c89547b22464923e242b0d63c84c1480
SHA256

cdcab9a3b4610c8734320fb46da896595c2de1bb29fc5b038264e3a01cc41671
SHA512

a7b5b176baffc5876ba71fdc03ae1f5c861ffc1b6abad2db463c4aed96c3ea350f85c51d11e4ef297ad632e51d74ab4c731436603ceba979992285d09d84fc86
SSDEEP

1536:Sjjl3nwzSuOqBubw/WgT6zMKAOK2lCWcQajhRuv:C5UOq0ukgOK2l7aFQv

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 2248 wrote to memory of 2268	2248	rundll32.exe	6
PID 2248 wrote to memory of 2268	2248	rundll32.exe	6
PID 2248 wrote to memory of 2268	2248	rundll32.exe	6
PID 2248 wrote to memory of 2268	2248	rundll32.exe	6
PID 2248 wrote to memory of 2268	2248	rundll32.exe	6
PID 2248 wrote to memory of 2268	2248	rundll32.exe	6
PID 2248 wrote to memory of 2268	2248	rundll32.exe	6

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\8d47cde53372d1041513537995f32ddb.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2248
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\8d47cde53372d1041513537995f32ddb.dll,#1
  2⤵
  PID:2268

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads