e85ade355beeae9796b8d0b760ba78e82d8436f210e1302b053baa8d206d98a6 | Triage

Analysis

max time kernel
94s
max time network
95s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
13/07/2024, 06:00

Sharing

Report Analysis Logs

General

Target

5736b62b611b7bf8d00f61e8042732e0N.dll
Size

3KB
MD5

5736b62b611b7bf8d00f61e8042732e0
SHA1

c2425412aa2fce58412189eef3ade81dda289404
SHA256

e85ade355beeae9796b8d0b760ba78e82d8436f210e1302b053baa8d206d98a6
SHA512

a3750a1b5f1b7f2423d7374b14d8592a4babf284773917c1f6055e4e27f8083e87815cd970edb1b2cac0a200cb1471cdb475ac6edf7f5b858a1549a6aba93cc0

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1660 wrote to memory of 856	1660	rundll32.exe	83
PID 1660 wrote to memory of 856	1660	rundll32.exe	83
PID 1660 wrote to memory of 856	1660	rundll32.exe	83

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\5736b62b611b7bf8d00f61e8042732e0N.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:1660
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\5736b62b611b7bf8d00f61e8042732e0N.dll,#1
  2⤵
  PID:856

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads