5f09de90db804401842617dddb5750c6a8d7a27edb409c91f2ef86d0198d3e58 | Triage

Analysis

max time kernel
54s
max time network
49s
platform
windows10-2004_x64
resource
win10v2004-20240419-en
resource tags

arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system
submitted
27/04/2024, 05:43

Sharing

Report Analysis Logs

General

Target

timeAxesDll.dll
Size

104KB
MD5

6e188fb1ebd4777bff8a0c418e60f7ff
SHA1

be1e8e9156ea895d88798b3e0536811ff8f089c9
SHA256

545e9d781569951a55afefc626fb222bbeda4f7299bbf3367b25cb279abe39f3
SHA512

da9cb3f8b1b68daa70d2dbd28b8c0d92780058513e7acfd1f6919f153658f64f8d3ebdf5ddc3af9f5f7ff8483500d192c7971c6da6031c3082afb176d089077c
SSDEEP

1536:MO2bSxPz7kEXPP4Rz5UQtBzeWKzwab5UanjNAIOebvrIvw:MZoPkEXP6ZHzezzwab5UajNNVvrI4

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 4800 wrote to memory of 2024	4800	rundll32.exe	83
PID 4800 wrote to memory of 2024	4800	rundll32.exe	83
PID 4800 wrote to memory of 2024	4800	rundll32.exe	83

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\timeAxesDll.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:4800
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\timeAxesDll.dll,#1
  2⤵
  PID:2024

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads