fee11a0d3184b9f9953d099310bb6b6cd83a0817e99fe65eacff3f92b8545b86 | Triage

Analysis

max time kernel
122s
max time network
133s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
19/03/2024, 08:17

Sharing

Report Analysis Logs

General

Target

Rainmeter.dll
Size

582KB
MD5

c1c25581354ecf1a738d6a9d02bb9bd1
SHA1

798f98fe106dc7234f9ee53944b921e55260054d
SHA256

afd07ad67435174649b192571892456b73b587809fd884de5216632d68783786
SHA512

7b67b0d4ce4424d8a4364c0436e6a4b749075d8bfd1db9f1a124414016bf1e76badc60712d765444125380356a8996beaa506a18a5ebe551dd6f56b0b22d000b
SSDEEP

12288:jIsg5HB2m9IqheYj+KNIkFjlVbMvgVdyV2AB2GeQeyH:jzqHATqIYj+cPFjrFOBB29QeS

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3008	2252	WerFault.exe	28

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 1252 wrote to memory of 2252	1252	rundll32.exe	28
PID 1252 wrote to memory of 2252	1252	rundll32.exe	28
PID 1252 wrote to memory of 2252	1252	rundll32.exe	28
PID 1252 wrote to memory of 2252	1252	rundll32.exe	28
PID 1252 wrote to memory of 2252	1252	rundll32.exe	28
PID 1252 wrote to memory of 2252	1252	rundll32.exe	28
PID 1252 wrote to memory of 2252	1252	rundll32.exe	28
PID 2252 wrote to memory of 3008	2252	rundll32.exe	29
PID 2252 wrote to memory of 3008	2252	rundll32.exe	29
PID 2252 wrote to memory of 3008	2252	rundll32.exe	29
PID 2252 wrote to memory of 3008	2252	rundll32.exe	29

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\Rainmeter.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:1252
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\Rainmeter.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:2252
- - C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -u -p 2252 -s 248
    3⤵
    - Program crash
    PID:3008

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads