7a476b7cd95ec60d012b8699560d5d606587cba86c4cf472a2048d682be96942

Analysis

max time kernel
145s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
13/02/2024, 06:48

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

98c000b146f1932f88ad93941e660307.dll
Size

8KB
MD5

98c000b146f1932f88ad93941e660307
SHA1

d49e37f11885f58263670f8870bbad2137815da0
SHA256

7a476b7cd95ec60d012b8699560d5d606587cba86c4cf472a2048d682be96942
SHA512

f17cc72c492fac40bc4cfca49109461538cb99522580921c4b62bd06d85a998a2e5fd7b0da0b9e30c6513565ba6c12387619080cd1495ca87c6134e62e216133
SSDEEP

192:GWElCA/ek5S1xEpSfT1BWFRlqX+gK9/eN39hL:SlD/hwT6FRlqX+gKZe

Score

8^/10

persistence

Malware Config

Signatures

Modifies AppInit DLL entries 2 TTPs
persistence

Registry Run Keys / Startup Folder
T1547.001

Modify Registry
T1112

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 4528 wrote to memory of 1472	4528	rundll32.exe	86
PID 4528 wrote to memory of 1472	4528	rundll32.exe	86
PID 4528 wrote to memory of 1472	4528	rundll32.exe	86

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\98c000b146f1932f88ad93941e660307.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:4528
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\98c000b146f1932f88ad93941e660307.dll,#1
  2⤵
  PID:1472

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads