7f84b9d1710249e6194cf77d1bd58cdb0eef49ff1e502bbea5a586f5c2b9aa70 | Triage

Analysis

max time kernel
1800s
max time network
1808s
platform
windows11-21h2_x64
resource
win11-20240709-en
resource tags

arch:x64arch:x86image:win11-20240709-enlocale:en-usos:windows11-21h2-x64system
submitted
10-07-2024 15:40

Sharing

Report Analysis Logs

General

Target

chrome_elf.dll
Size

1020KB
MD5

7191d97ce7886a1a93a013e90868db96
SHA1

52dd736cb589dd1def87130893d6b9449a6a36e3
SHA256

32f925f833aa59e3f05322549fc3c326ac6fc604358f4efbf94c59d5c08b8dc6
SHA512

38ebb62c34d466935eabb157197c7c364d4345f22aa3b2641b636196ca1aeaa2152ac75d613ff90817cb94825189612ddd12fb96df29469511a46a7d9620e724
SSDEEP

12288:5iQwqdp5JyuHjLLvSWaaLjqSPSN9bcWiZ5J+l6UequWRz2n:5i5YIub1a8qSPSNOld4d

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1436 wrote to memory of 1464	1436	rundll32.exe	78
PID 1436 wrote to memory of 1464	1436	rundll32.exe	78
PID 1436 wrote to memory of 1464	1436	rundll32.exe	78

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\chrome_elf.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:1436
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\chrome_elf.dll,#1
  2⤵
  PID:1464

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads