59f7fdf5b4464950b5551aa9e9f06f7774b52fbff74f03e851b40569d4426ff6 | Triage

Analysis

max time kernel
148s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
22/07/2024, 18:57

Sharing

Report Analysis Logs

General

Target

ttsacid4.dll
Size

64KB
MD5

5a28201e2432334359fb0032215a75c6
SHA1

63946caca2a474b892957007f500de5c4b50030b
SHA256

f3c46b3ca6d30f4ecc1d6bee07fec068e3466fc4d79e00cc755fb0074151108d
SHA512

c8e10a9406edf0d0b016f62f4a41d7bd938629adbc76488d722efdd534a45b6b92e85c011917385b491ee145a9d24ef7afcce4a02f2fd0e7ca1000305e0363f6
SSDEEP

768:BWn1+sIuNuYGsESLmkhahTwAqhIMkYYbBYpIBSygp254z:AjgYoSLPhPpIMkY+B/oyD5

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 3008 wrote to memory of 2604	3008	rundll32.exe	84
PID 3008 wrote to memory of 2604	3008	rundll32.exe	84
PID 3008 wrote to memory of 2604	3008	rundll32.exe	84

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\ttsacid4.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:3008
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\ttsacid4.dll,#1
  2⤵
  PID:2604

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads