Analysis
-
max time kernel
119s -
max time network
119s -
platform
windows10_x64 -
resource
win10v20201028 -
submitted
25-11-2020 21:55
Static task
static1
Behavioral task
behavioral1
Sample
Izezma64.dll
Resource
win7v20201028
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
Izezma64.dll
Resource
win10v20201028
windows10_x64
0 signatures
0 seconds
General
-
Target
Izezma64.dll
-
Size
133KB
-
MD5
dbb6e2b86d6fdaf27984ce81f5e1a159
-
SHA1
dee293054d1897ed8ee9d660665fffe18792a068
-
SHA256
5fdeda1570ec0bb954576fc84ada2bff2bf0cd1c4e20bfea32752c8ddcd4e45e
-
SHA512
a3d01c291cbd1ca6d329ac555e3165f48990ef1bc613e7c7e0287bf95e76da5202a76226f68e334e77435b1c447a275ef6c5c2ab94899e49ac849222c8cbd449
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes:
regsvr32.exedescription pid process target process PID 3324 wrote to memory of 1452 3324 regsvr32.exe regsvr32.exe PID 3324 wrote to memory of 1452 3324 regsvr32.exe regsvr32.exe PID 3324 wrote to memory of 1452 3324 regsvr32.exe regsvr32.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1452-0-0x0000000000000000-mapping.dmp