1d47ee09572afccac42993538c2f05a99e76b2f4d6a206d82ad0cf35531cc61d | Triage

Analysis

max time kernel
122s
max time network
126s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
23/02/2024, 00:47

Sharing

Report Analysis Logs

General

Target

DWrite.dll
Size

139KB
MD5

d570c871f9c332bc5c0e7a9a13d4244a
SHA1

1aeb264f56d2bdc50df2d9b647518b58707cb9ae
SHA256

1d47ee09572afccac42993538c2f05a99e76b2f4d6a206d82ad0cf35531cc61d
SHA512

6fff9f52a342fab5a2ae06d37cd5c51b6b15325165dc1337a836099d932734db7e0b4045e75fa718be15aaf250b1a813a3867d614fc0c05f84e483f4875860ac
SSDEEP

3072:ifTq3QtlwGdTTYgi7YZUfjRUjfEccibev:iW3QtlwGdTTYLzfjuH

Score

8^/10

Malware Config

Signatures

Blocklisted process makes network request 1 IoCs

flow	pid	Process
1	2460	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\DWrite.dll,#1
1⤵
- Blocklisted process makes network request
PID:2460

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2460-0-0x00000000000A0000-0x00000000000A1000-memory.dmp

Filesize
4KB

Download
memory/2460-6-0x00000000002A0000-0x00000000002A1000-memory.dmp

Filesize
4KB

Download