cd77fa8cf2c0062ad1c0e410b8dec9bb219f9119cc66b87803305c0f9be83dbd | Triage

Analysis

max time kernel
93s
max time network
97s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
15-07-2024 13:52

Sharing

Report Analysis Logs

General

Target

e80d2feb8286f4341751a3477283dad0N.dll
Size

3KB
MD5

e80d2feb8286f4341751a3477283dad0
SHA1

a0aa71bcc584da09571e45876f8b054e5bc7c45b
SHA256

cd77fa8cf2c0062ad1c0e410b8dec9bb219f9119cc66b87803305c0f9be83dbd
SHA512

1dfdca494435759d419152a09ca4af77f4e8e44c894e48dd21c5a8cb39c8a3a55971c33f9aa6ee938728836a94afcc17f4c04914f5ed44116b67cae20663684c

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 4008 wrote to memory of 3996	4008	rundll32.exe	83
PID 4008 wrote to memory of 3996	4008	rundll32.exe	83
PID 4008 wrote to memory of 3996	4008	rundll32.exe	83

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\e80d2feb8286f4341751a3477283dad0N.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:4008
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\e80d2feb8286f4341751a3477283dad0N.dll,#1
  2⤵
  PID:3996

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads