33d0bc76fa1c09fe48e29f19ffd56325f1b435c4eac6c81ae7bd2ae26ab7444e | Triage

Analysis

max time kernel
122s
max time network
123s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
25/02/2025, 17:31

Sharing

Report Analysis Logs

General

Target

vcruntime140_1.dll
Size

56KB
MD5

13995cf2f33dcc1ed0726f36f40c1fff
SHA1

cf3a15d1a44eb44b364ac5d60e8404c2be190d3b
SHA256

4cf017f49d5d8d894ac09535e1473a54380422db08e0c9bd06b55ff723e49a5e
SHA512

8e46959c190f02a221b9d2f5e179c8cf2d98350039145bf3913be41511abc46a18516772a21c8eb0564f6a5c28e5f25e95ee71459cbd8a2f9c5938992f199296
SSDEEP

1536:HvGS8fZ1esJw4dz0XbcJ5heB/maB+d8zuK/:wfZ1bJwoz2B/Yab

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2360 wrote to memory of 2508	2360	rundll32.exe	30
PID 2360 wrote to memory of 2508	2360	rundll32.exe	30
PID 2360 wrote to memory of 2508	2360	rundll32.exe	30

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\vcruntime140_1.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2360
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2360 -s 80
  2⤵
  PID:2508

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads