Analysis

  • max time kernel
    121s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    23/02/2024, 11:14

General

  • Target

    xinput9_1_0.dll

  • Size

    25KB

  • MD5

    8f62cec35733b1d4839bf8b86f1de771

  • SHA1

    843b6cea94a47d1e013b8f65051398052ce9ba57

  • SHA256

    b8be1a241fde00955c62a93ff6b4d54b58cadb790f2cb7991137911f070a52de

  • SHA512

    a5678eb465c4b9977e65f29c681a52d5a738e7823da4b2c6d42ee02fa8c5ce04d56bae8c90f9d1f82601cf44ae173d3a530478d516ff7ade2033313a8c5fa995

  • SSDEEP

    384:8pRgFrFGE3rwCryUmkMM5/Mg3NX5nuqLPZtxQSum6JRitjInacQshLSbeA:v4kMe/j3eCxR6lSEz

Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 7 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\xinput9_1_0.dll,#1
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2924
    • C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\xinput9_1_0.dll,#1
      2⤵
        PID:2936

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads