fdca31d917022c94f32a0194f558db3bad4e89874f316b61950d670bdf0deff0 | Triage

Analysis

max time kernel
1559s
max time network
1564s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
12-07-2024 10:11

Sharing

Report Analysis Logs

General

Target

steam_api.dll
Size

251KB
MD5

23767288e6a003aaaa54355cbe108da8
SHA1

c7f21dc71491fe661c698f5c561405c0e3f423c1
SHA256

209135c082a8ef8323479384e97d769d9b2d98f727bbb34a7806ce150b750c89
SHA512

a870b2f99da48ad07f9b36d6730d74af5f285af12e21a24d61e6e3023d5917920bd343fe295b7374a2065bf9c09b6f1cbb03fbcf05206f4bd0544b5f0eb0e147
SSDEEP

6144:3arGRDMhiFh18vUThy7g0F6vrlOcHvlwupy4RFsKQ97XtDQies3R:fDMwhRThy7g0F6vr4Klpd1QpuOh

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 7 IoCs

Processes:

rundll32.exe

description	pid	process	target process
PID 2376 wrote to memory of 2952	2376	rundll32.exe	rundll32.exe
PID 2376 wrote to memory of 2952	2376	rundll32.exe	rundll32.exe
PID 2376 wrote to memory of 2952	2376	rundll32.exe	rundll32.exe
PID 2376 wrote to memory of 2952	2376	rundll32.exe	rundll32.exe
PID 2376 wrote to memory of 2952	2376	rundll32.exe	rundll32.exe
PID 2376 wrote to memory of 2952	2376	rundll32.exe	rundll32.exe
PID 2376 wrote to memory of 2952	2376	rundll32.exe	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\steam_api.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2376

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\steam_api.dll,#1
2⤵
PID:2952

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2952-0-0x0000000074800000-0x00000000748B1000-memory.dmp

Filesize
708KB

Download
memory/2952-5-0x0000000074570000-0x0000000074621000-memory.dmp

Filesize
708KB

Download
memory/2952-4-0x0000000074800000-0x00000000748B1000-memory.dmp

Filesize
708KB

Download
memory/2952-1-0x0000000074570000-0x0000000074621000-memory.dmp

Filesize
708KB

Download