206653547f89a412dd77a9e7e17a4e2b4e699a1a0849d68e2469433ff9332de6 | Triage

Analysis

max time kernel
119s
max time network
122s
platform
windows7_x64
resource
win7-20240220-en
resource tags

arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
submitted
15-06-2024 02:16

Sharing

Report Analysis Logs

General

Target

$PLUGINSDIR/ll.dll
Size

113KB
MD5

e59a731e0e538728b68d76f2b69d8eee
SHA1

1c08ab1fa933a099bac7615d83e2253fb6533e49
SHA256

a0120f6aaeea92ff215375acf0690f3d38318178fa911275e3c88a8a1a0fe388
SHA512

8d3c022d7437c10598fb1f2c8bae5a21ff4e4f3cb842250b51d88569d3a3bb89097c9c9d55d8019630631ca77b82032c089beb9973ecc8a4cdb3f9b6f4d4e360
SSDEEP

3072:ZKUm+gv29W2pAiOUg7EVpOtGrTvqkKOM:Zvm++29W2CP7EVpOUrTSkXM

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2908	2244	WerFault.exe	28

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 2240 wrote to memory of 2244	2240	rundll32.exe	28
PID 2240 wrote to memory of 2244	2240	rundll32.exe	28
PID 2240 wrote to memory of 2244	2240	rundll32.exe	28
PID 2240 wrote to memory of 2244	2240	rundll32.exe	28
PID 2240 wrote to memory of 2244	2240	rundll32.exe	28
PID 2240 wrote to memory of 2244	2240	rundll32.exe	28
PID 2240 wrote to memory of 2244	2240	rundll32.exe	28
PID 2244 wrote to memory of 2908	2244	rundll32.exe	29
PID 2244 wrote to memory of 2908	2244	rundll32.exe	29
PID 2244 wrote to memory of 2908	2244	rundll32.exe	29
PID 2244 wrote to memory of 2908	2244	rundll32.exe	29

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\ll.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2240
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\ll.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:2244
- - C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -u -p 2244 -s 220
    3⤵
    - Program crash
    PID:2908

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads