Analysis
-
max time kernel
16s -
max time network
17s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
15-07-2024 13:52
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
e80d2feb8286f4341751a3477283dad0N.dll
Resource
win7-20240704-en
windows7-x64
1 signatures
120 seconds
Behavioral task
behavioral2
Sample
e80d2feb8286f4341751a3477283dad0N.dll
Resource
win10v2004-20240709-en
windows10-2004-x64
1 signatures
120 seconds
General
-
Target
e80d2feb8286f4341751a3477283dad0N.dll
-
Size
3KB
-
MD5
e80d2feb8286f4341751a3477283dad0
-
SHA1
a0aa71bcc584da09571e45876f8b054e5bc7c45b
-
SHA256
cd77fa8cf2c0062ad1c0e410b8dec9bb219f9119cc66b87803305c0f9be83dbd
-
SHA512
1dfdca494435759d419152a09ca4af77f4e8e44c894e48dd21c5a8cb39c8a3a55971c33f9aa6ee938728836a94afcc17f4c04914f5ed44116b67cae20663684c
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 7 IoCs
description pid Process procid_target PID 2232 wrote to memory of 2260 2232 rundll32.exe 28 PID 2232 wrote to memory of 2260 2232 rundll32.exe 28 PID 2232 wrote to memory of 2260 2232 rundll32.exe 28 PID 2232 wrote to memory of 2260 2232 rundll32.exe 28 PID 2232 wrote to memory of 2260 2232 rundll32.exe 28 PID 2232 wrote to memory of 2260 2232 rundll32.exe 28 PID 2232 wrote to memory of 2260 2232 rundll32.exe 28
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\e80d2feb8286f4341751a3477283dad0N.dll,#11⤵
- Suspicious use of WriteProcessMemory
PID:2232 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\e80d2feb8286f4341751a3477283dad0N.dll,#12⤵PID:2260
-