d87f723d17e0397593ea7560d6a0938e25cddcbc77b9128b90f8a1c871665ef8 | Triage

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
02/06/2024, 14:24

Sharing

Report Analysis Logs

General

Target

equil/vcruntime140_1d.dll
Size

52KB
MD5

af2ff5d5a619fe0ad4f08641ca500b03
SHA1

37717918f9c76b7a4df16923c14a57f66a244ed6
SHA256

ad5303adfe2db81f00bbfafe76205522005976e11148c8e91cab7d6cebc84942
SHA512

0c12d0dea9c60712e5a1f866b04c5c877ac7866b7a7a5793ea18784aa84985c5c506c95fe8e2cf57d2801a926433fa0c6e3466cd77d6bb0ee69496bfc9710cf6
SSDEEP

768:xgLq1pDi843Csb7PjWGPB8SAsMyGrfAQQP9zux:62IvWy8NFzrYFzux

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2236 wrote to memory of 2100	2236	rundll32.exe	28
PID 2236 wrote to memory of 2100	2236	rundll32.exe	28
PID 2236 wrote to memory of 2100	2236	rundll32.exe	28

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\equil\vcruntime140_1d.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2236
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2236 -s 80
  2⤵
  PID:2100

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads