a77210dc3ae1df36cab033e2b52ca8c656bd5cbc5257a79220526f32f4bf5949 | Triage

Analysis

max time kernel
92s
max time network
106s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
25-05-2024 22:17

Sharing

Report Analysis Logs

General

Target

DrvInDll.dll
Size

116KB
MD5

c27eeb5cd4adff5669b633619d34ee45
SHA1

9edb24785af657663e51606ef02e25c40c5b0e56
SHA256

94987e1bc6b8d45f77b56d0a74f2e41191ea5361df810aef395f1cf4e2af0465
SHA512

1f582f81d595af78e74493fe4ca53ec885a85453fe60bdd50cdb8718bc4078f6caf2927a6b0872d81e06a9a34ce2a87fc30a114b83299a0439fcbd3212a443f1
SSDEEP

3072:LWb9Tw53DoSOnXzCRTlxzYxNAg0Fub8tKWL:uM53D1OjCTlqrAOJs

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 3000 wrote to memory of 4372	3000	rundll32.exe	87
PID 3000 wrote to memory of 4372	3000	rundll32.exe	87
PID 3000 wrote to memory of 4372	3000	rundll32.exe	87

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\DrvInDll.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:3000
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\DrvInDll.dll,#1
  2⤵
  PID:4372

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads