Analysis
- max time kernel
146s - max time network
155s - platform
windows10-2004_x64 - resource
win10v2004-20240226-en - resource tags
- submitted
08/03/2024, 12:45
General
- Target bb4aad318180b0a955c8438358744b6c.dll
- Size 344KB
- Sample240308-py3dasgb3s
- SHA256 e5491df87754b2ecf79b1da03fa6114a02a1468a7c951f8a5acecd1e1dc0224d
Malware Config
Signatures
- Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\bb4aad318180b0a955c8438358744b6c.dll,#11⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\bb4aad318180b0a955c8438358744b6c.dll,#12⤵
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4504-0-0x0000000010000000-0x0000000010092000-memory.dmp
memory/4504-1-0x0000000002A00000-0x0000000002A54000-memory.dmp
memory/4504-13-0x0000000002C10000-0x0000000002C11000-memory.dmp
memory/4504-12-0x0000000002C30000-0x0000000002C31000-memory.dmp
memory/4504-11-0x0000000003BC0000-0x0000000003BC1000-memory.dmp
memory/4504-10-0x0000000002BC0000-0x0000000002BC1000-memory.dmp
memory/4504-9-0x0000000003BD0000-0x0000000003BD1000-memory.dmp
memory/4504-8-0x0000000002B90000-0x0000000002B91000-memory.dmp
memory/4504-7-0x0000000002BA0000-0x0000000002BA1000-memory.dmp
memory/4504-6-0x0000000001120000-0x0000000001121000-memory.dmp
memory/4504-5-0x00000000029E0000-0x00000000029E1000-memory.dmp
memory/4504-4-0x0000000002BB0000-0x0000000002BB1000-memory.dmp
memory/4504-3-0x0000000002B60000-0x0000000002B61000-memory.dmp
memory/4504-2-0x0000000002B80000-0x0000000002B81000-memory.dmp
memory/4504-14-0x0000000002C60000-0x0000000002C61000-memory.dmp
memory/4504-15-0x0000000002BF0000-0x0000000002BF1000-memory.dmp
memory/4504-16-0x0000000002BE0000-0x0000000002BE1000-memory.dmp
memory/4504-17-0x0000000002C50000-0x0000000002C51000-memory.dmp
memory/4504-18-0x0000000002C40000-0x0000000002C41000-memory.dmp
memory/4504-19-0x0000000002C70000-0x0000000002C71000-memory.dmp
memory/4504-20-0x0000000002C00000-0x0000000002C01000-memory.dmp
memory/4504-21-0x0000000002CE0000-0x0000000002CE1000-memory.dmp
memory/4504-22-0x0000000002CA0000-0x0000000002CA1000-memory.dmp
memory/4504-23-0x0000000002C90000-0x0000000002C91000-memory.dmp
memory/4504-24-0x0000000003BD0000-0x0000000003BD1000-memory.dmp
memory/4504-25-0x0000000003BD0000-0x0000000003BD1000-memory.dmp
memory/4504-32-0x0000000003BC0000-0x0000000003BC1000-memory.dmp
memory/4504-33-0x0000000003BC0000-0x0000000003BC1000-memory.dmp
memory/4504-31-0x0000000003BC0000-0x0000000003BC1000-memory.dmp
memory/4504-30-0x0000000003BC0000-0x0000000003BC1000-memory.dmp
memory/4504-29-0x0000000003BC0000-0x0000000003BC1000-memory.dmp
memory/4504-28-0x0000000003BC0000-0x0000000003BC1000-memory.dmp
memory/4504-27-0x0000000003BD0000-0x0000000003BD1000-memory.dmp
memory/4504-26-0x0000000003BD0000-0x0000000003BD1000-memory.dmp
memory/4504-34-0x0000000003BC0000-0x0000000003BC1000-memory.dmp