c6d4de1df7d634fc0020709568a16ee72c2d4c73c63eb8b2c5e2da1fb2f8f7a8 | Triage

Analysis

max time kernel
93s
max time network
94s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
16/07/2024, 10:23

Sharing

Report Analysis Logs

General

Target

a7c10d3e1bd5630b1b69ddb718033480N.dll
Size

5KB
MD5

a7c10d3e1bd5630b1b69ddb718033480
SHA1

37f4b31d1839f91116b62fcd2d5f6ad1a9cac762
SHA256

c6d4de1df7d634fc0020709568a16ee72c2d4c73c63eb8b2c5e2da1fb2f8f7a8
SHA512

7f9fec682ce8fbca894496facd835ade86172ebf26611a43e2163efee4019aa2dd89b8dad371ec4830093259da8ec4f7051693ebb04b82d56accf03a109ae308
SSDEEP

48:CCy86+Wet9Q/iooHeiefhe+/lSMYEq2TgIvg7:hy859x0P8Ma2TgI2

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 3340 wrote to memory of 3848	3340	rundll32.exe	83
PID 3340 wrote to memory of 3848	3340	rundll32.exe	83
PID 3340 wrote to memory of 3848	3340	rundll32.exe	83

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\a7c10d3e1bd5630b1b69ddb718033480N.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:3340
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\a7c10d3e1bd5630b1b69ddb718033480N.dll,#1
  2⤵
  PID:3848

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads