596bc1168ba9c8e5e190b165a33d81fb7c9f729257c1b295d16bfce8b6276c85 | Triage

Analysis

max time kernel
102s
max time network
102s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
20/07/2024, 05:38

Sharing

Report Analysis Logs

General

Target

55faae75167bc8de181f452f18516a80N.dll
Size

3KB
MD5

55faae75167bc8de181f452f18516a80
SHA1

7001c5bacd8fc8985deddca141c521504658cc29
SHA256

596bc1168ba9c8e5e190b165a33d81fb7c9f729257c1b295d16bfce8b6276c85
SHA512

7ea9c3b2f88d954acf7e0beeba48138bf21c816a1a7d15dbd816947662112168bc24e28e9be09e5452e81aaaab99b66ab991f2a47ee273cff32ee269ff53c0bf

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2052 wrote to memory of 4876	2052	rundll32.exe	84
PID 2052 wrote to memory of 4876	2052	rundll32.exe	84
PID 2052 wrote to memory of 4876	2052	rundll32.exe	84

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\55faae75167bc8de181f452f18516a80N.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2052
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\55faae75167bc8de181f452f18516a80N.dll,#1
  2⤵
  PID:4876

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads