43af75e3d39600a06d59ac96af30463358df9c1601cbbb31ac30d6bc165e1c7a | Triage

Analysis

max time kernel
135s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
21/05/2024, 05:30

Sharing

Report Analysis Logs

General

Target

DisplayManager.dll
Size

122KB
MD5

0af134ed4e513819f28ddf42c946775c
SHA1

b70017916a07afcabb03e6a4bb23e4151434fe3c
SHA256

43af75e3d39600a06d59ac96af30463358df9c1601cbbb31ac30d6bc165e1c7a
SHA512

c04407e859a27d41c5e2de41bde3a75287ddedcb9217910e889eb9c3f54f1f0499f48e51c50c47dd7f2bd052cd1b24e003807661343a357c6996c310c0e71c62
SSDEEP

3072:b0+yOqOLmGpJfbq2tR25GLt/GZD5OeKzd/nVrwkpG9nLgHmI:b0zEtR25ygOeKzBnVQKj

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2688 wrote to memory of 2752	2688	rundll32.exe	83
PID 2688 wrote to memory of 2752	2688	rundll32.exe	83
PID 2688 wrote to memory of 2752	2688	rundll32.exe	83

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\DisplayManager.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2688
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\DisplayManager.dll,#1
  2⤵
  PID:2752

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads