Analysis

  • max time kernel
    92s
  • max time network
    113s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240412-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
  • submitted
    16-04-2024 00:13

General

  • Target

    components/foo_abx.dll

  • Size

    185KB

  • MD5

    79a9d6750da6de4aaf006f138494b807

  • SHA1

    092cb100ad2daf4afd622c59294a55ed5f36ce2e

  • SHA256

    28a1f09671f0de75381343a5580682ee1816e0ee507e6945cc5d84095051905e

  • SHA512

    c578e7a06467c753779993d59a2c9ae2a6f9c0bc3c7921058e6fa1cc1e1e507e7853dd1fd2e4016374861015a04cea9cb8d58d898cdc7009606b280f0ca0f2c0

  • SSDEEP

    3072:YHp/x05FoarfNC6NMI2C0ArC6DKOr1sWAg0Fu0th3V:aAT1N3vXTt1hAOE

Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\components\foo_abx.dll,#1
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:860
    • C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\components\foo_abx.dll,#1
      2⤵
        PID:3180

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/3180-0-0x0000000010000000-0x0000000010034000-memory.dmp

      Filesize

      208KB