Resubmissions

12-06-2024 18:38

240612-w98g1syhkk 7

12-06-2024 18:29

240612-w46fgayfjn 7

Analysis

  • max time kernel
    121s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    12-06-2024 18:29

General

  • Target

    $_36_.dll

  • Size

    947KB

  • MD5

    610f4eb991ae0db08785dc4a6c1b1fb2

  • SHA1

    0b28c35f1569eec2dd1cd6c8cfdabb349f6e0866

  • SHA256

    6872cf401483b46c9b0456f676cc6f7e810fe11b7831567b187c6228ec4c0857

  • SHA512

    327647555d35f4dcf567579c4750299d8fe8ead866bfc304efd7f2b855bfd659da407c344c8077041310e214d0395d2f0c85c7d504ecf0403b970aca72496f7a

  • SSDEEP

    24576:Wo6hPUFdvQDqO6gNuSzRsK9WPIOg3Gm39ZJ4N9RMe:WNPUfYDqkWPIOg3Gm39ZJMRMe

Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 7 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\$_36_.dll,#1
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1752
    • C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\$_36_.dll,#1
      2⤵
        PID:2548

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads