Analysis

  • max time kernel
    118s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    26-05-2024 12:21

General

  • Target

    tinyxml.dll

  • Size

    24KB

  • MD5

    553fd99899eff49eb8cd3415cd8aa4f0

  • SHA1

    3d6a2190be821d2133ef5464af878d5f4d13e408

  • SHA256

    ff931eeeeb4dab0545e6261b06ea3f581793406ce9f865ada181972a7b1e7e1e

  • SHA512

    4ab56ffba9aca3e9ab0fb3c1ce567f860d83b4f055ada4785ad26e53899d5aa9f5688592e25d21ab1d79dc7b45aef9e12ed0aa1086bfb64cb9c23a7840662719

  • SSDEEP

    384:XtOfB+juJ5j7ICYPUcRlSkSib4bv5ONPWswX/X/:9OsKvALX4LswX/X

Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 7 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\tinyxml.dll,#1
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2232
    • C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\tinyxml.dll,#1
      2⤵
        PID:2884

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads