12978eef9daed92259dc10c461bdf027cc646b49425f9941da73d4ded1483d86 | Triage

Analysis

max time kernel
49s
max time network
56s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
14/06/2024, 20:18

Sharing

Report Analysis Logs

General

Target

SDL.dll
Size

296KB
MD5

7bff3da476cdcf86242962026bc43e7f
SHA1

75df814438566ea911cdcf9124d52c3ca094eb26
SHA256

01105e403dd259c4a2965fc94d290feb2c445f89602f4778c82dfe6d59ce3f58
SHA512

ff3890ca0e0360d6ae4e1e8491f692cae943f07c7f1dbcb712fc824e20f852c4a20cdfefcbb8c849d88d58db14b5a03b93127e06881f39c1bba950a9033543cc
SSDEEP

6144:gwTNvO36NpaY+JOtOEO0tgN0s1jnikkhIgMjahKmzdlNQL:HlO36paY+JOtOH06h1zikrZeKL

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2208 wrote to memory of 1748	2208	rundll32.exe	82
PID 2208 wrote to memory of 1748	2208	rundll32.exe	82
PID 2208 wrote to memory of 1748	2208	rundll32.exe	82

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\SDL.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2208
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\SDL.dll,#1
  2⤵
  PID:1748

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads