18c74dde6426a0637bbdfff078e677fe9813391e7db685735f90cc42ac1cd231

Resubmissions

18-02-2024 15:25

18-02-2024 15:19

18-02-2024 14:45

max time kernel
21s
max time network
20s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
18-02-2024 15:19

Target

Minty/dll/vcruntime140.dll
Size

95KB
MD5

f34eb034aa4a9735218686590cba2e8b
SHA1

2bc20acdcb201676b77a66fa7ec6b53fa2644713
SHA256

9d2b40f0395cc5d1b4d5ea17b84970c29971d448c37104676db577586d4ad1b1
SHA512

d27d5e65e8206bd7923cf2a3c4384fec0fc59e8bc29e25f8c03d039f3741c01d1a8c82979d7b88c10b209db31fbbec23909e976b3ee593dc33481f0050a445af
SSDEEP

1536:ywqHLG4SsAzAvadZw+1Hcx8uIYNUzUoHA4decbK/zJNuw6z5U:ytrfZ+jPYNzoHA4decbK/FNu51U

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2256 wrote to memory of 1988	2256	rundll32.exe	28
PID 2256 wrote to memory of 1988	2256	rundll32.exe	28
PID 2256 wrote to memory of 1988	2256	rundll32.exe	28

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\Minty\dll\vcruntime140.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2256
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2256 -s 84
  2⤵
  PID:1988