7f4af8bf6568d684df93719bb2c64588ac3117885f07bdb7c46ce1d981a71013 | Triage

Analysis

max time kernel
121s
max time network
123s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
08/03/2024, 01:14

Sharing

Report Analysis Logs

General

Target

MSJINT35.dll
Size

120KB
MD5

fa138d551c56a1142aab95ec823dbe0d
SHA1

af299754ea8e13fe1ae491d496b8539fc9a866f8
SHA256

4528947718a00dcd143c4e3d866e702a73d70dbaa389fc3fa77a7eb1a8796e1f
SHA512

3aa5e741a9f723bc628ef3b2695fd18cc18c222a0a6be76f93c77c9fc2603ae37355b0d82df469bc1e5cea309fafc4c3a7aa85e3a605c70f9dcbe09d93c31542
SSDEEP

1536:TEhTmxiBs29gcRBqcVb+7OEK5aHDwt+vl26MhkMIuz:ToLugBqUbIdPu

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 1752 wrote to memory of 2412	1752	rundll32.exe	28
PID 1752 wrote to memory of 2412	1752	rundll32.exe	28
PID 1752 wrote to memory of 2412	1752	rundll32.exe	28
PID 1752 wrote to memory of 2412	1752	rundll32.exe	28
PID 1752 wrote to memory of 2412	1752	rundll32.exe	28
PID 1752 wrote to memory of 2412	1752	rundll32.exe	28
PID 1752 wrote to memory of 2412	1752	rundll32.exe	28

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\MSJINT35.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:1752
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\MSJINT35.dll,#1
  2⤵
  PID:2412

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads