c4079adbd900f429976e7363d635dca803e7d244675263ebb30b1ea8fc889e29 | Triage

Analysis

max time kernel
149s
max time network
157s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
13/05/2024, 23:30

Sharing

Report Analysis Logs

General

Target

GGLanguage.dll
Size

148KB
MD5

48cfefdcd1b9f0246e47e224491c75dc
SHA1

2d34d41bcca5757849b752b4845462fcb7ca1b3d
SHA256

089e472bccecf674ed5a08fff38d86be4b74ef7a64ef7aa0dbd2d4e3e83e25fe
SHA512

61b24536f4f37f4320d5167a984bb18f2c47c493a76dcd8a7602f64c12c1c9df5ffae26f8bed59c4e1034d17efc6de2d57d3357b5015327299b57640dac09957
SSDEEP

1536:0YgB7kWAmbIiOymNymRwyAR2rc/xvVfEw2vc1Q:akWKirhQ5Acc/xvVfsc1Q

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2260 wrote to memory of 4004	2260	rundll32.exe	83
PID 2260 wrote to memory of 4004	2260	rundll32.exe	83
PID 2260 wrote to memory of 4004	2260	rundll32.exe	83

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\GGLanguage.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2260
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\GGLanguage.dll,#1
  2⤵
  PID:4004

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads