898469d7ea89a6c106c1aceb314930cd270e3f916ad725a83c04fca829b5b5a8 | Triage

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
01/07/2024, 20:54

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

OPN_DLL.dll
Size

36KB
MD5

7587d1644511857bcb620685413ac030
SHA1

69bdd2c5c328f9ef21cb6caa6c6b1b48f8c6bf83
SHA256

0287bda502ee71770f2def8856a326fe7dc7e5d771c0fe645fa904444b458b31
SHA512

92b38119764af05e065fbe0a400b5765e66dd55d92401dca3f375bee51633a487e0124fe63077875f9be28752076f93f5d01b28e3d837a189a080fb88491cfdd
SSDEEP

384:aGop0vMxoFa0TlwwWBcR5iyIBOIW/T8Har6Uls52VO:/op+e0No8l6IkX

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 2964 wrote to memory of 2840	2964	rundll32.exe	28
PID 2964 wrote to memory of 2840	2964	rundll32.exe	28
PID 2964 wrote to memory of 2840	2964	rundll32.exe	28
PID 2964 wrote to memory of 2840	2964	rundll32.exe	28
PID 2964 wrote to memory of 2840	2964	rundll32.exe	28
PID 2964 wrote to memory of 2840	2964	rundll32.exe	28
PID 2964 wrote to memory of 2840	2964	rundll32.exe	28

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\OPN_DLL.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2964
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\OPN_DLL.dll,#1
  2⤵
  PID:2840

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads