Analysis
- max time kernel
148s - max time network
154s - platform
windows10-2004_x64 - resource
win10v2004-20240226-en - resource tags
- submitted
05/03/2024, 07:56
General
- Target b4318eede8687bcca85b9ee6614aa462.dll
- Size 172KB
- Sample240305-js7syaab4v
- SHA256 8b6c1e10f4f24f659c8cf914cc0cc84df2c29cf4c5e8f949cee31892e3eb4d42
Score
5/10
Malware Config
Signatures
- Drops file in System32 directory 1 IoCs
- Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\b4318eede8687bcca85b9ee6614aa462.dll,#11⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\b4318eede8687bcca85b9ee6614aa462.dll,#12⤵
- Drops file in System32 directory
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2964-1-0x0000000001260000-0x00000000012A4000-memory.dmp
memory/2964-0-0x0000000000400000-0x000000000043C000-memory.dmp
memory/2964-2-0x0000000002CF0000-0x0000000002CF1000-memory.dmp
memory/2964-4-0x0000000001170000-0x0000000001171000-memory.dmp
memory/2964-5-0x0000000002D10000-0x0000000002D11000-memory.dmp
memory/2964-3-0x0000000001250000-0x0000000001251000-memory.dmp
memory/2964-6-0x0000000002D50000-0x0000000002D52000-memory.dmp
memory/2964-7-0x0000000002D40000-0x0000000002D41000-memory.dmp
memory/2964-8-0x0000000002D00000-0x0000000002D01000-memory.dmp
memory/2964-9-0x0000000000400000-0x000000000043C000-memory.dmp