0929449c2299832fe787d7b24836ecffb925e17ce915da1a90b99c49e77b56d3 | Triage

Analysis

max time kernel
38s
max time network
43s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
17-07-2024 21:48

Sharing

Report Analysis Logs

General

Target

TCCTL32.dll
Size

448KB
MD5

69f72ad2dad99ff0fbc7f2c671523014
SHA1

8aaab0955014b89ca794a51dd527d3afe6f38a94
SHA256

23f17cc168cc82b8ae16f3fc041d4465e1b12e66dcac1713f582f99303a740dd
SHA512

ea18d92790f52405027666b7501cf908426b9b57fec4157a45d86387d50324e414644245269dc1a0567b27c6c4b7c4b323d692bf449add4797dfcd7101531349
SSDEEP

12288:suqhtvbez3wj9AP8Ah0DAmlse99fow3/qkxf5iJg0nTUtnTvm:s3htk/eHoJktEKITUFTvm

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 4908 wrote to memory of 3600	4908	rundll32.exe	84
PID 4908 wrote to memory of 3600	4908	rundll32.exe	84
PID 4908 wrote to memory of 3600	4908	rundll32.exe	84

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\TCCTL32.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:4908
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\TCCTL32.dll,#1
  2⤵
  PID:3600

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads