Analysis

  • max time kernel
    121s
  • max time network
    129s
  • platform
    windows7_x64
  • resource
    win7-20240221-es
  • resource tags

    arch:x64arch:x86image:win7-20240221-eslocale:es-esos:windows7-x64systemwindows
  • submitted
    22/02/2024, 20:50

General

  • Target

    $SYSDIR/bdmjpeg.dll

  • Size

    15KB

  • MD5

    2ac3988bbee9584c57efcff61616e105

  • SHA1

    cd92b3c225b497962cb90b1f5a68b5da42cb6ee3

  • SHA256

    9c260db97b168d699148dc58d9b013834052e610fbcc78da1c4d7cc2d33a0ce2

  • SHA512

    53eeca7a1c983bee04f6f923ffd14d4a44b13be407c10bbf854d06da1d397e36d19a0d99f0f1a8a66304e38f90f07fc2c395b37e4a8893bfb5a017cf4b3c916e

  • SSDEEP

    192:Jc7HKZhkNpB6zEjPAS/Qjbf32oXX3WLjSHB772HXrOR3Xp9EqQSp1Bz3F:Jc7FKQ6moXX3WaHt2HbOtj1Rz

Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 7 IoCs

Processes

  • C:\Windows\SysWOW64\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\$SYSDIR\bdmjpeg.dll,#1
    1⤵
      PID:2080
    • C:\Windows\system32\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\$SYSDIR\bdmjpeg.dll,#1
      1⤵
      • Suspicious use of WriteProcessMemory
      PID:2268

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads