Overview
overview
10Static
static
100c2dd9c9b9...68.exe
windows7-x64
100c2dd9c9b9...68.exe
windows10-2004-x64
100e4fc438de...91.exe
windows7-x64
30e4fc438de...91.exe
windows10-2004-x64
1010849d5fae...52.dll
windows7-x64
110849d5fae...52.dll
windows10-2004-x64
1170004b7b6...1c.exe
windows7-x64
10170004b7b6...1c.exe
windows10-2004-x64
1018db51db10...c1.dll
windows7-x64
1018db51db10...c1.dll
windows10-2004-x64
101b32bfbc64...d8.exe
windows7-x64
71b32bfbc64...d8.exe
windows10-2004-x64
7296281f1f1...d8.exe
windows7-x64
3296281f1f1...d8.exe
windows10-2004-x64
102c2e949171...3c.exe
windows7-x64
32c2e949171...3c.exe
windows10-2004-x64
10311d9f8c68...99.dll
windows7-x64
10311d9f8c68...99.dll
windows10-2004-x64
104bb311ba0e...81.exe
windows7-x64
104bb311ba0e...81.exe
windows10-2004-x64
107365c4cf37...f6.dll
windows7-x64
107365c4cf37...f6.dll
windows10-2004-x64
1073f00d2746...7e.exe
windows7-x64
373f00d2746...7e.exe
windows10-2004-x64
10832a15b86c...dd.exe
windows7-x64
3832a15b86c...dd.exe
windows10-2004-x64
108ce5a8cb0a...be.exe
windows7-x64
38ce5a8cb0a...be.exe
windows10-2004-x64
1098972d73a8...70.dll
windows7-x64
198972d73a8...70.dll
windows10-2004-x64
1bfd5040c97...c6.exe
windows7-x64
3bfd5040c97...c6.exe
windows10-2004-x64
10Analysis
-
max time kernel
13s -
max time network
21s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
17-07-2024 10:22
Behavioral task
behavioral1
Sample
0c2dd9c9b940868e85bc46857d049a057af32b8abdb93ebc6732774575013168.exe
Resource
win7-20240708-en
windows7-x64
Behavioral task
behavioral2
Sample
0c2dd9c9b940868e85bc46857d049a057af32b8abdb93ebc6732774575013168.exe
Resource
win10v2004-20240709-en
windows10-2004-x64
Behavioral task
behavioral3
Sample
0e4fc438decc9723b89bd0e71b9ee30c1a8390e697d790b2d5ce96e94accd791.exe
Resource
win7-20240704-en
windows7-x64
Behavioral task
behavioral4
Sample
0e4fc438decc9723b89bd0e71b9ee30c1a8390e697d790b2d5ce96e94accd791.exe
Resource
win10v2004-20240709-en
windows10-2004-x64
Behavioral task
behavioral5
Sample
10849d5fae1394fde8cdf2f3b239f96347ff5f94d164d2046ff4253697f09252.dll
Resource
win7-20240705-en
windows7-x64
Behavioral task
behavioral6
Sample
10849d5fae1394fde8cdf2f3b239f96347ff5f94d164d2046ff4253697f09252.dll
Resource
win10v2004-20240709-en
windows10-2004-x64
Behavioral task
behavioral7
Sample
170004b7b6bab6c3c860a6402f9d3d8988e4f3de7682e28738c3c27ac33b0e1c.exe
Resource
win7-20240704-en
windows7-x64
Behavioral task
behavioral8
Sample
170004b7b6bab6c3c860a6402f9d3d8988e4f3de7682e28738c3c27ac33b0e1c.exe
Resource
win10v2004-20240709-en
windows10-2004-x64
Behavioral task
behavioral9
Sample
18db51db105a5afa46582870ca416a9284bdeda0f06c4848bbd9eef0db6aeac1.dll
Resource
win7-20240705-en
windows7-x64
Behavioral task
behavioral10
Sample
18db51db105a5afa46582870ca416a9284bdeda0f06c4848bbd9eef0db6aeac1.dll
Resource
win10v2004-20240709-en
windows10-2004-x64
Behavioral task
behavioral11
Sample
1b32bfbc6412d6abaa2df4f530b3a7587c4f73a6cb6db93b421ecaca33e508d8.exe
Resource
win7-20240704-en
windows7-x64
Behavioral task
behavioral12
Sample
1b32bfbc6412d6abaa2df4f530b3a7587c4f73a6cb6db93b421ecaca33e508d8.exe
Resource
win10v2004-20240709-en
windows10-2004-x64
Behavioral task
behavioral13
Sample
296281f1f12acb1b777d311323541065639683e2da9f883d56c35721c222e0d8.exe
Resource
win7-20240705-en
windows7-x64
Behavioral task
behavioral14
Sample
296281f1f12acb1b777d311323541065639683e2da9f883d56c35721c222e0d8.exe
Resource
win10v2004-20240709-en
windows10-2004-x64
Behavioral task
behavioral15
Sample
2c2e949171d86da9b5c58901de2e4a99c4fe86fe92c47556f53b833ce77c503c.exe
Resource
win7-20240708-en
windows7-x64
Behavioral task
behavioral16
Sample
2c2e949171d86da9b5c58901de2e4a99c4fe86fe92c47556f53b833ce77c503c.exe
Resource
win10v2004-20240709-en
windows10-2004-x64
Behavioral task
behavioral17
Sample
311d9f8c68e5661348e97b7e483e7ea1b3fc08863bb3f5f585581ef081058399.dll
Resource
win7-20240704-en
windows7-x64
Behavioral task
behavioral18
Sample
311d9f8c68e5661348e97b7e483e7ea1b3fc08863bb3f5f585581ef081058399.dll
Resource
win10v2004-20240709-en
windows10-2004-x64
Behavioral task
behavioral19
Sample
4bb311ba0e479264b1d3c7deab5bfb44b0c1fb100d82aa7d605369b0ac938981.exe
Resource
win7-20240705-en
windows7-x64
Behavioral task
behavioral20
Sample
4bb311ba0e479264b1d3c7deab5bfb44b0c1fb100d82aa7d605369b0ac938981.exe
Resource
win10v2004-20240709-en
windows10-2004-x64
Behavioral task
behavioral21
Sample
7365c4cf371b0f66c7c948e14ae33c9a00a81929cf254bd064ec32b371756ff6.dll
Resource
win7-20240705-en
windows7-x64
Behavioral task
behavioral22
Sample
7365c4cf371b0f66c7c948e14ae33c9a00a81929cf254bd064ec32b371756ff6.dll
Resource
win10v2004-20240709-en
windows10-2004-x64
Behavioral task
behavioral23
Sample
73f00d2746a71e412b9c6d43c7f5e0ed5faf3e03730bfd6e24b8955e42c2267e.exe
Resource
win7-20240704-en
windows7-x64
Behavioral task
behavioral24
Sample
73f00d2746a71e412b9c6d43c7f5e0ed5faf3e03730bfd6e24b8955e42c2267e.exe
Resource
win10v2004-20240709-en
windows10-2004-x64
Behavioral task
behavioral25
Sample
832a15b86c6ab8cc88944a3c53df4f81825c799e3cc7eac48d9e3d487d007add.exe
Resource
win7-20240708-en
windows7-x64
Behavioral task
behavioral26
Sample
832a15b86c6ab8cc88944a3c53df4f81825c799e3cc7eac48d9e3d487d007add.exe
Resource
win10v2004-20240709-en
windows10-2004-x64
Behavioral task
behavioral27
Sample
8ce5a8cb0a900826dad8a42ce81540e58e9ea3ac7b4c6235db82074589c4a3be.exe
Resource
win7-20240704-en
windows7-x64
Behavioral task
behavioral28
Sample
8ce5a8cb0a900826dad8a42ce81540e58e9ea3ac7b4c6235db82074589c4a3be.exe
Resource
win10v2004-20240709-en
windows10-2004-x64
Behavioral task
behavioral29
Sample
98972d73a823165a52ed8ce9d295250be083884d142c92c3268936c5269fac70.dll
Resource
win7-20240704-en
windows7-x64
Behavioral task
behavioral30
Sample
98972d73a823165a52ed8ce9d295250be083884d142c92c3268936c5269fac70.dll
Resource
win10v2004-20240709-en
windows10-2004-x64
Behavioral task
behavioral31
Sample
bfd5040c9750dc045214de1282ae9c211eca9d9e452c2310dbf40dfa7bb426c6.exe
Resource
win7-20240704-en
windows7-x64
Behavioral task
behavioral32
Sample
bfd5040c9750dc045214de1282ae9c211eca9d9e452c2310dbf40dfa7bb426c6.exe
Resource
win10v2004-20240709-en
windows10-2004-x64
General
-
Target
98972d73a823165a52ed8ce9d295250be083884d142c92c3268936c5269fac70.dll
-
Size
127KB
-
MD5
8cfd7419f24c7904d2a71b5ae6ea5daa
-
SHA1
2368eef5485a2a252d0c13485cb92e6b5b443f6f
-
SHA256
98972d73a823165a52ed8ce9d295250be083884d142c92c3268936c5269fac70
-
SHA512
7c399953c44de5092eaa463610bee00787fe0945961bf10f08b55d6122307ebc0a7b388b79f359c13c236d5d94d185bb464a4cb4808bd1676aaa083ab9fde1be
-
SSDEEP
3072:IDrG/eLj+t+YpqUjWouVPkrH3/U9aQw62xm4+5j:CaeL6g2jfuVPqtA5j
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 7 IoCs
description pid Process procid_target PID 1140 wrote to memory of 896 1140 rundll32.exe 29 PID 1140 wrote to memory of 896 1140 rundll32.exe 29 PID 1140 wrote to memory of 896 1140 rundll32.exe 29 PID 1140 wrote to memory of 896 1140 rundll32.exe 29 PID 1140 wrote to memory of 896 1140 rundll32.exe 29 PID 1140 wrote to memory of 896 1140 rundll32.exe 29 PID 1140 wrote to memory of 896 1140 rundll32.exe 29
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\98972d73a823165a52ed8ce9d295250be083884d142c92c3268936c5269fac70.dll,#11⤵
- Suspicious use of WriteProcessMemory
PID:1140 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\98972d73a823165a52ed8ce9d295250be083884d142c92c3268936c5269fac70.dll,#12⤵PID:896
-