5c28511a37fa39869f2d6fef6f8e9c8e282216823ec401803b649d9b79b84260 | Triage

Analysis

max time kernel
143s
max time network
133s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
06-03-2024 12:54

Sharing

Report Analysis Logs

General

Target

libeay32.dll
Size

996KB
MD5

1ef203f15d2cadde7dead56cebcab76f
SHA1

0e8ebe37ced8018ab85b021eea50987ee1a86b85
SHA256

43bd635e9c372b57c15d40bf03079e3135ebd98e9d1ec1f87bf59ca04c859208
SHA512

417cdda1d3ac73bce6ad9db7cb7a35c22788595a138675b58fd301d17e799d13a7ae6c5d65e115db15700882043ac135396637a4f29b8451b523ed2b26904b02
SSDEEP

24576:vacXtxw2fK4OgF246WqrSpeBumZG0B7dGZ:v6HH46/SpYumZGsGZ

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 3944 wrote to memory of 3852	3944	rundll32.exe	88
PID 3944 wrote to memory of 3852	3944	rundll32.exe	88
PID 3944 wrote to memory of 3852	3944	rundll32.exe	88

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\libeay32.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:3944
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\libeay32.dll,#1
  2⤵
  PID:3852

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads