Analysis
-
max time kernel
147s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
09/04/2024, 22:15
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
3c52152a82be6775c34ca7d582e4ba40.dll
Resource
win7-20240221-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
3c52152a82be6775c34ca7d582e4ba40.dll
Resource
win10v2004-20240226-en
1 signatures
150 seconds
General
-
Target
3c52152a82be6775c34ca7d582e4ba40.dll
-
Size
6KB
-
MD5
3c52152a82be6775c34ca7d582e4ba40
-
SHA1
5b9ead0758988e10186698ab7b4043234d3e9bfd
-
SHA256
e06db465af1e6043bbcdc4aa54117af44463703902b9a139889d502e41311179
-
SHA512
a6d8f5c1859fab682525830658bf9ec52d3eb1d0cbc273203f57ec3814f76d9ed1ae4b967f1661bb665413a54f3e033c7e1987e00db37930d61feedb0bfaebc5
-
SSDEEP
48:63mll5YVOa9VUX1iwbQWu0mB+BDq9J5SH:VDa9VUX9bQWGB+FqX5SH
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 2460 wrote to memory of 2156 2460 rundll32.exe 84 PID 2460 wrote to memory of 2156 2460 rundll32.exe 84 PID 2460 wrote to memory of 2156 2460 rundll32.exe 84
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3c52152a82be6775c34ca7d582e4ba40.dll,#11⤵
- Suspicious use of WriteProcessMemory
PID:2460 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\3c52152a82be6775c34ca7d582e4ba40.dll,#12⤵PID:2156
-