Analysis
-
max time kernel
143s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
28-02-2024 19:15
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
aca43679f38b6d765249e4374b0985d0.dll
Resource
win7-20240220-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
aca43679f38b6d765249e4374b0985d0.dll
Resource
win10v2004-20240226-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
aca43679f38b6d765249e4374b0985d0.dll
-
Size
7KB
-
MD5
aca43679f38b6d765249e4374b0985d0
-
SHA1
837092af18e02aeabc778ee737e2d5cde87b33cf
-
SHA256
23ae7f39d8dec250983b1f0105464e45f4e62098c2cf8321f8af23ce0f3be460
-
SHA512
7705429e9fc99e68bda63d38894621ce5b77b1ec521b1cd65eee9077579749c78c04f8c36c5cb542bf87896798d2882e36482adf009d19d409ac500cdc41cc8d
-
SSDEEP
48:66ay5YVO3EVkApc2wp8hH1NZn5EquglQ067YbPWHbABbgL3q9J5S2hmc:b3EVkApcX4Hiv0hbP1q3qX5S2hV
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 2708 wrote to memory of 3012 2708 rundll32.exe 94 PID 2708 wrote to memory of 3012 2708 rundll32.exe 94 PID 2708 wrote to memory of 3012 2708 rundll32.exe 94
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\aca43679f38b6d765249e4374b0985d0.dll,#11⤵
- Suspicious use of WriteProcessMemory
PID:2708 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\aca43679f38b6d765249e4374b0985d0.dll,#12⤵PID:3012
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=4064 --field-trial-handle=2356,i,13261194862334667799,7441241219475888176,262144 --variations-seed-version /prefetch:81⤵PID:4032