cf798a7400592909303c9a47f7ef3a7f0aecb20a03bf51ccaa9528fb90bcaa87 | Triage

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
21-05-2024 15:25

Sharing

Report Analysis Logs

General

Target

dll_injector32.exe
Size

335KB
MD5

899de6f7d13cedab53eba18764c5af9a
SHA1

590ee04270212f9e5329b1c938e24f4d3ce84dbb
SHA256

cf798a7400592909303c9a47f7ef3a7f0aecb20a03bf51ccaa9528fb90bcaa87
SHA512

ab09ef30630db09e72a22275bb1f6f4cf0db8d58d801c6e64820a0cb8888696f7734b83e379b6f5a9f1bd0eccd9a2862931695e46587cdab3bb5cfe41b6193c1
SSDEEP

6144:iEHBYLyhigSCvaiVf5RlZE6s7SI8CcNAO6wZenQ:iyBAb1CvJ5RDEBuxenQ

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

Processes:

dll_injector32.exe

description	pid	process	target process
PID 3744 wrote to memory of 436	3744	dll_injector32.exe	cmd.exe
PID 3744 wrote to memory of 436	3744	dll_injector32.exe	cmd.exe
PID 3744 wrote to memory of 436	3744	dll_injector32.exe	cmd.exe

C:\Users\Admin\AppData\Local\Temp\dll_injector32.exe
"C:\Users\Admin\AppData\Local\Temp\dll_injector32.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3744
- C:\Windows\SysWOW64\cmd.exe
  C:\Windows\system32\cmd.exe /c pause
  2⤵
  PID:436

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads