Analysis

  • max time kernel
    147s
  • max time network
    158s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240426-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23-05-2024 11:53

General

  • Target

    WindowsFormsIntegration.dll

  • Size

    190KB

  • MD5

    087d917310a9355ef8ed1f55104872e9

  • SHA1

    7a681602ec4d82f3659b750670f18aad3778d4e1

  • SHA256

    5f14056bf15c6f4bce946d95289ad5659bb5a7f2756b0da3dc22799eccfcf2a2

  • SHA512

    270f970fdf090173650a8b2667aeee6823609993398d352ecf3d28350a2427125f657ac9f5a1f60355bdcc8bebfa75500c97a88b851508f327df3530b34c5ae4

  • SSDEEP

    3072:E9l1w2q3QtH5W6pyJ4GJxWjQ/pIUGOpQBdxeVJm49mwCl5qf0B9iK8aJkmsWmuUL:teZWRJxWjSpGO6wPeZUvuCF

Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\WindowsFormsIntegration.dll,#1
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:4844
    • C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\WindowsFormsIntegration.dll,#1
      2⤵
        PID:848

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads