Analysis
-
max time kernel
149s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
14-03-2024 01:46
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
c75fa4e0b61cdf8aed91a29e3e4cfed0.dll
Resource
win7-20240215-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
c75fa4e0b61cdf8aed91a29e3e4cfed0.dll
Resource
win10v2004-20240226-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
c75fa4e0b61cdf8aed91a29e3e4cfed0.dll
-
Size
268KB
-
MD5
c75fa4e0b61cdf8aed91a29e3e4cfed0
-
SHA1
070701e217c392fe27df72f3f25e85dcb200b152
-
SHA256
ad41073c135a05b0a6a425f881223d0a4885520f254c7d58ba10d889be43de18
-
SHA512
43944e423a70bdd2e78df0a8d783830fabb3cdf539ee4bd6a1aea1cc062f1cc10b38536383e2eb475a114038983572a1eb2e07cdc3ede9b892b5981c0cebcce0
-
SSDEEP
3072:HC5mwjd/X1MU0Zovs9x/EFdGVUJG2DPpKjJ8AXp0da/65SGsoMQWaMAyaPiNTZV:HC9j1FN0CC16I27S/6TW3F3Nt
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 2448 wrote to memory of 1448 2448 rundll32.exe 92 PID 2448 wrote to memory of 1448 2448 rundll32.exe 92 PID 2448 wrote to memory of 1448 2448 rundll32.exe 92
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\c75fa4e0b61cdf8aed91a29e3e4cfed0.dll,#11⤵
- Suspicious use of WriteProcessMemory
PID:2448 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\c75fa4e0b61cdf8aed91a29e3e4cfed0.dll,#12⤵PID:1448
-