750c447d6e3c7d74ccab736a0082ef437b1cd2000d761d3aff2b73227457b29c | Triage

Analysis

max time kernel
92s
max time network
123s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
10-04-2024 11:54

Sharing

Report Analysis Logs

General

Target

d3d10core.dll
Size

33KB
MD5

2a5354ad68b4a18df4a2b67e14da676d
SHA1

4368c4322c670da4eddf1aa26fa83d1394f5fe6c
SHA256

c67b0f17b91bf912ccd4d65e356ab6f2f85864677bc7b04ee072ed502064e607
SHA512

2720679ec6d3524998daedfa872b8ae4d6a9afd3630eb9b2c5434d5c91e845ab4df5172621665789f064118fc76612bb288db218a6de8946d9709dc1945e126c
SSDEEP

384:66dUkb2QAFX+Miy4OZ+Siv0lhivOWBy1sYRoWyoW4IBeQmoTHlfFRm49Mufjq7:66AF8wm0lhivOWEKYqeIXlXj

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

Processes:

rundll32.exe

description	pid	process	target process
PID 2940 wrote to memory of 1736	2940	rundll32.exe	rundll32.exe
PID 2940 wrote to memory of 1736	2940	rundll32.exe	rundll32.exe
PID 2940 wrote to memory of 1736	2940	rundll32.exe	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\d3d10core.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2940

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\d3d10core.dll,#1
2⤵
PID:1736

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads