Analysis

  • max time kernel
    131s
  • max time network
    139s
  • platform
    windows10-1703_x64
  • resource
    win10-20240404-en
  • resource tags

    arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system
  • submitted
    31/05/2024, 12:29

General

  • Target
    KeyFile/1049/sharedmanagementobjects_keyfile.dll
  • Size 23KB
  • Sample240531-ppaa6agh7x
  • SHA256 f7e5cae32e2ec2c35346954bfb0b7352f9a697c08586e52494a71ef00e40d948
  • MD5 SHA1 SHA512 SSDEEP
Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\KeyFile\1049\sharedmanagementobjects_keyfile.dll,#1
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:3900
    • C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\KeyFile\1049\sharedmanagementobjects_keyfile.dll,#1
      2⤵
        PID:3548

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads