Analysis
-
max time kernel
119s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
20-02-2024 23:56
Static task
static1
Behavioral task
behavioral1
Sample
90fa29cc98be1d715df26d22079bdb8ce1d1fd3ce6a4efb39a4c192134e01020.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
90fa29cc98be1d715df26d22079bdb8ce1d1fd3ce6a4efb39a4c192134e01020.dll
Resource
win10v2004-20231215-en
General
-
Target
90fa29cc98be1d715df26d22079bdb8ce1d1fd3ce6a4efb39a4c192134e01020.dll
-
Size
54KB
-
MD5
f58e0dfb8f915fa5ce1b7ca50c46b51b
-
SHA1
9acb977f13fce7ec38275887ddbbc0f42532e907
-
SHA256
90fa29cc98be1d715df26d22079bdb8ce1d1fd3ce6a4efb39a4c192134e01020
-
SHA512
4ebab09c4319c4604e7dad00f669e572ecf79d9db74a1a6f6ad833ea4be2ce3ead1548196a9b15a052ad006af28afa2005bd5523b8215e1f51fce9671a73580d
-
SSDEEP
768:rC8sPHjgxRIO5h7Ji10Ed4WKn84n2ZePq+RTdFvnM+cmVqDj64Bj:ri/Mf7oiEdXKn84n2ad/vbcmVWjXBj
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 7 IoCs
Processes:
rundll32.exedescription pid process target process PID 2248 wrote to memory of 2976 2248 rundll32.exe rundll32.exe PID 2248 wrote to memory of 2976 2248 rundll32.exe rundll32.exe PID 2248 wrote to memory of 2976 2248 rundll32.exe rundll32.exe PID 2248 wrote to memory of 2976 2248 rundll32.exe rundll32.exe PID 2248 wrote to memory of 2976 2248 rundll32.exe rundll32.exe PID 2248 wrote to memory of 2976 2248 rundll32.exe rundll32.exe PID 2248 wrote to memory of 2976 2248 rundll32.exe rundll32.exe
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\90fa29cc98be1d715df26d22079bdb8ce1d1fd3ce6a4efb39a4c192134e01020.dll,#11⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\90fa29cc98be1d715df26d22079bdb8ce1d1fd3ce6a4efb39a4c192134e01020.dll,#12⤵