62a975fae25e57252820f71f83ea171a1aabff5c772bde730803866a393b59a0 | Triage

Analysis

max time kernel
121s
max time network
126s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
06/03/2024, 17:43

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

b7fe01a77485d9f7e46ac6412b99e11e.dll
Size

33KB
MD5

b7fe01a77485d9f7e46ac6412b99e11e
SHA1

57e8a0f727849982e7e9671241da711380b69165
SHA256

62a975fae25e57252820f71f83ea171a1aabff5c772bde730803866a393b59a0
SHA512

b0d85bece82bfe7eda62ca5fd707e21911601c23323e1cf48a0f62a33b0ce62bb77f108ef009009e2994a566735aa7909b1602db36b597256ba807c67482d2c8
SSDEEP

768:4wRslJKTFf688AxeiRo95y47HwRxeSmmzxmZ:dRssf68dxetq472MazxU

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 2228 wrote to memory of 2220	2228	rundll32.exe	30
PID 2228 wrote to memory of 2220	2228	rundll32.exe	30
PID 2228 wrote to memory of 2220	2228	rundll32.exe	30
PID 2228 wrote to memory of 2220	2228	rundll32.exe	30
PID 2228 wrote to memory of 2220	2228	rundll32.exe	30
PID 2228 wrote to memory of 2220	2228	rundll32.exe	30
PID 2228 wrote to memory of 2220	2228	rundll32.exe	30

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\b7fe01a77485d9f7e46ac6412b99e11e.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2228
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\b7fe01a77485d9f7e46ac6412b99e11e.dll,#1
  2⤵
  PID:2220

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads