eecb6d1c6d94c8023c56edf6b42a762c63659364582e4aedb5c75cd0a6f9abae | Triage

Analysis

max time kernel
134s
max time network
105s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
21/05/2024, 05:42

Sharing

Report Analysis Logs

General

Target

acppage.dll
Size

68KB
MD5

fdfee9a47525597410b54d18399c43af
SHA1

8bb6d880bdb92106b058cdfb44f42ee41fd29c91
SHA256

eecb6d1c6d94c8023c56edf6b42a762c63659364582e4aedb5c75cd0a6f9abae
SHA512

08029fff666ebe72885287f85823bc040cc883d71e837a92c2167b57ffb16f3d98aaf0fa92aef220488e0b1c1e68c5c7d419c72b855a4df67eafd899e76fe694
SSDEEP

1536:w5HS44tWlYg5pbMrsFzRckMjRvolkH+QgVmTB2BeCF:wP4tWV5pbMr81cfQlk+QggTB2ACF

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 3704 wrote to memory of 4612	3704	rundll32.exe	83
PID 3704 wrote to memory of 4612	3704	rundll32.exe	83
PID 3704 wrote to memory of 4612	3704	rundll32.exe	83

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\acppage.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:3704
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\acppage.dll,#1
  2⤵
  PID:4612

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads