1a9d3144ec3984b4ffa2fbdbede809220903a218831d39afd7d3923fdc7348b3 | Triage

Analysis

max time kernel
134s
max time network
146s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
26/05/2024, 13:02

Sharing

Report Analysis Logs

General

Target

EmailApis.dll
Size

788KB
MD5

83e11529431e1cb1c1e23f3ea40f065c
SHA1

751fe1b271af4c6474514704afa5f1b88a18fff0
SHA256

1a9d3144ec3984b4ffa2fbdbede809220903a218831d39afd7d3923fdc7348b3
SHA512

b43ac6963bf3295726472bc98b5dbaddf02232aa70e84ef6720450704906ec988e975c9104715263b9a972a410e7959388d3a2b6c9fcdc9105008b6f732025b8
SSDEEP

12288:/7vD6cAVhFsbSfppSo6NY7fzSg5MS5Ac:DLLahFQSCzNY7fzSBS5v

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2736 wrote to memory of 3420	2736	rundll32.exe	85
PID 2736 wrote to memory of 3420	2736	rundll32.exe	85
PID 2736 wrote to memory of 3420	2736	rundll32.exe	85

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\EmailApis.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2736
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\EmailApis.dll,#1
  2⤵
  PID:3420

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads