10a4cb7a2790344ded0513b288d0431967a44706a345f50d1b8fec8e244793d9 | Triage

Analysis

max time kernel
148s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
20/05/2024, 20:16

Sharing

Report Analysis Logs

General

Target

SDL_image.dll
Size

50KB
MD5

9272ad942a6788b025fc2cf16e3b1e1b
SHA1

e43b18a35e0f09613ace424af200cbff87040ad7
SHA256

2751864babb62fb8d82dbce09438da461c786b1b7d2915a6f6d0c0a53a8bc776
SHA512

012b0bef8aa0c296704ae0c0f6865593a2bdd19c8740406938ec7b62ff51bcaeff12fb27a31b6b9586ba7c8c85a510b94b15cd2f11574024a2c0fcc8ffe4c362
SSDEEP

1536:PQRgmekzqJm4rOJgxx7ExeCWGif9NfBDO:PQRgmekOJnrOMAifvA

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 4212 wrote to memory of 1588	4212	rundll32.exe	83
PID 4212 wrote to memory of 1588	4212	rundll32.exe	83
PID 4212 wrote to memory of 1588	4212	rundll32.exe	83

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\SDL_image.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:4212
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\SDL_image.dll,#1
  2⤵
  PID:1588

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads