9922a06260a27c159b6210d2917e13f87726d7ef274238fb0d1216c4a96eb651 | Triage

Analysis

max time kernel
91s
max time network
122s
platform
windows10-2004_x64
resource
win10v2004-20231222-en
resource tags

arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
submitted
04/02/2024, 18:22

Sharing

Report Analysis Logs

General

Target

8fd5f32c592a1201030556662b5d8cb1.dll
Size

6KB
MD5

8fd5f32c592a1201030556662b5d8cb1
SHA1

449cbfe8b390fdbf4fdb0b411ade59b2bf86b571
SHA256

9922a06260a27c159b6210d2917e13f87726d7ef274238fb0d1216c4a96eb651
SHA512

7f6272743581291e0ea0a6445f73e4658e7a3cc7de4f4bc95fbc1c196e301fe906f247006d612a77568546889337555497f14aa40edab12c406da417e1195510
SSDEEP

48:6EQt5YVOSVVEPy+wEMmqiHNpU10CB+BDq9J5SV3DY:CSVVEPozmB70B+FqX5S1D

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 396 wrote to memory of 3832	396	rundll32.exe	85
PID 396 wrote to memory of 3832	396	rundll32.exe	85
PID 396 wrote to memory of 3832	396	rundll32.exe	85

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\8fd5f32c592a1201030556662b5d8cb1.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:396
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\8fd5f32c592a1201030556662b5d8cb1.dll,#1
  2⤵
  PID:3832

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads