Analysis
- max time kernel
150s - max time network
152s - platform
windows10-2004_x64 - resource
win10v2004-20240226-en - resource tags
- submitted
29/02/2024, 00:51
General
- Target ad46f12b1fcd467c2c1b57381071e7b4.dll
- Size 222KB
- Sample240229-a7l1cahe7t
- SHA256 76fbdbbe7ea18cdb555e3ca4dfb6f49c1f15da53f01fbf3575ea695f9e43c965
Malware Config
Signatures
- Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\ad46f12b1fcd467c2c1b57381071e7b4.dll,#11⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\ad46f12b1fcd467c2c1b57381071e7b4.dll,#12⤵
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3008-0-0x0000000000400000-0x0000000000445000-memory.dmp
memory/3008-1-0x0000000002D10000-0x0000000002D5B000-memory.dmp
memory/3008-2-0x0000000002E80000-0x0000000002E81000-memory.dmp
memory/3008-3-0x0000000002EB0000-0x0000000002EB1000-memory.dmp
memory/3008-4-0x00000000015A0000-0x00000000015A1000-memory.dmp
memory/3008-5-0x0000000002E90000-0x0000000002E91000-memory.dmp
memory/3008-6-0x0000000002D00000-0x0000000002D01000-memory.dmp
memory/3008-7-0x0000000002EC0000-0x0000000002EC1000-memory.dmp
memory/3008-9-0x0000000002EC0000-0x0000000002EC1000-memory.dmp
memory/3008-8-0x0000000002EC0000-0x0000000002EC1000-memory.dmp
memory/3008-10-0x0000000002EC0000-0x0000000002EC1000-memory.dmp
memory/3008-11-0x0000000002EC0000-0x0000000002EC1000-memory.dmp
memory/3008-12-0x0000000002EC0000-0x0000000002EC1000-memory.dmp
memory/3008-13-0x0000000002EC0000-0x0000000002EC1000-memory.dmp