Analysis

  • max time kernel
    122s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20241010-en
  • resource tags

    arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
  • submitted
    19-11-2024 12:14

General

  • Target

    f036b3031238597750e077c2d03b2bc41d089f9db461244059db8485fac28e63.dll

  • Size

    1.2MB

  • MD5

    4a2579809a60dafdd9da2c50484e8735

  • SHA1

    d3e1c79b5b5d7ab8ff2313d7696998527a3f5bd1

  • SHA256

    f036b3031238597750e077c2d03b2bc41d089f9db461244059db8485fac28e63

  • SHA512

    2af6ee811093ae53ec4d9358d44a5d6fbc32a85b509502010490c4eb324dd22cc659478ea2d39aa37b70dac71ca9544e427acd440f4ff1024bf0557ec0c666ff

  • SSDEEP

    24576:LohYJJUEWaGjGM7hiBrDaFy73fChNqhXWSNNmbCTM5GrkQPXHMtR1tD1b1tTkRoN:Lorx7TkQ

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 3 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious use of WriteProcessMemory 15 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\f036b3031238597750e077c2d03b2bc41d089f9db461244059db8485fac28e63.dll,#1
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2536
    • C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\f036b3031238597750e077c2d03b2bc41d089f9db461244059db8485fac28e63.dll,#1
      2⤵
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:3048
      • C:\Windows\SysWOW64\cmd.exe
        cmd /c md C:\Users\Public\Documents\MM
        3⤵
        • System Location Discovery: System Language Discovery
        PID:1916
      • C:\Windows\SysWOW64\cmd.exe
        cmd /c md C:\Users\Public\Documents\MM
        3⤵
        • System Location Discovery: System Language Discovery
        PID:2684

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads