Analysis

  • max time kernel
    122s
  • max time network
    129s
  • platform
    windows7_x64
  • resource
    win7-20240221-es
  • resource tags

    arch:x64arch:x86image:win7-20240221-eslocale:es-esos:windows7-x64systemwindows
  • submitted
    22/02/2024, 20:50

General

  • Target

    $SYSDIR/bdmpega.dll

  • Size

    57KB

  • MD5

    5c4b1aef2352cbf6974464fa2276a54a

  • SHA1

    ba6fc5ab6836418d2a79dc67e2cf4305eb969d6d

  • SHA256

    4a5afb70467d433040a3e31574de84058ce78f75ee5cea944ff6e00c6b232b0a

  • SHA512

    c0274c1ac86637567188940159936acc6eeeccbf4247bb7ad7dc1c5f5da8d27283ca23270bc03de534e39b8cde0475d596e55f37419d7e45098c4c71b9f907d4

  • SSDEEP

    768:522IN9PYUY9gpi00laScPILN0M7AoA6Obh0vaTxDcFMbjmzc8R+R:k2IPPYUuguZ707dBDZbatR+R

Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 7 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\$SYSDIR\bdmpega.dll,#1
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1336
    • C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\$SYSDIR\bdmpega.dll,#1
      2⤵
        PID:2148

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads