Analysis

  • max time kernel
    94s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240426-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29/05/2024, 21:06

General

  • Target

    Modules/inws.dll

  • Size

    40KB

  • MD5

    3a024dabc9b8413b95d2e8e49e8086c2

  • SHA1

    7626b676b0b6c0e79b02f83a2fd23149008e7095

  • SHA256

    57065012bfde815d823622b64490b0a8f7d640c2762e91fc55cf44159d34c041

  • SHA512

    4d5e1d5a1f81dc5fe71ecffaaa3cf3de9cd67ed29d8240f96666a969356bfb694fd04999835a8c211ee40b2e7b59954aa11994aac8ac0cc4521ba631ce461c93

  • SSDEEP

    768:MS1u5ZX/DLepH32aKx96VEyA+8sk1UnNtL41vTScciB:MR/Opw6Ci8lUnNN4dTS3iB

Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\Modules\inws.dll,#1
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2580
    • C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\Modules\inws.dll,#1
      2⤵
        PID:4052

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads