Overview
overview
10Static
static
2021021216...in.dll
windows7_x64
12021021216...in.dll
windows10_x64
12021021216...in.dll
windows7_x64
12021021216...in.dll
windows10_x64
102021021216...in.dll
windows7_x64
12021021216...in.dll
windows10_x64
102021021216...in.dll
windows7_x64
102021021216...in.dll
windows10_x64
102021021216...in.dll
windows7_x64
102021021216...in.dll
windows10_x64
102021021216...in.dll
windows7_x64
102021021216...in.dll
windows10_x64
102021021216...in.dll
windows7_x64
102021021216...in.dll
windows10_x64
102021021216...in.dll
windows7_x64
12021021216...in.dll
windows10_x64
10Analysis
-
max time kernel
13s -
max time network
102s -
platform
windows10_x64 -
resource
win10v20201028 -
submitted
18-02-2021 19:50
Static task
static1
Behavioral task
behavioral1
Sample
202102121641_48eacf290c0ed6287672551fcf426053f754c126c01fe6a01009c0ba599d3b8f.bin.dll
Resource
win7v20201028
Behavioral task
behavioral2
Sample
202102121641_48eacf290c0ed6287672551fcf426053f754c126c01fe6a01009c0ba599d3b8f.bin.dll
Resource
win10v20201028
Behavioral task
behavioral3
Sample
202102121641_4b32c3c2d28237ba331ae94e7fe4dfb566a0902d59eb84aa793b3adf0a5f378c.bin.dll
Resource
win7v20201028
Behavioral task
behavioral4
Sample
202102121641_4b32c3c2d28237ba331ae94e7fe4dfb566a0902d59eb84aa793b3adf0a5f378c.bin.dll
Resource
win10v20201028
Behavioral task
behavioral5
Sample
202102121641_7ae7db00b573a89b9c435a5147a265dd939d99552b92b5dd9baa9a16f95ae9d5.bin.dll
Resource
win7v20201028
Behavioral task
behavioral6
Sample
202102121641_7ae7db00b573a89b9c435a5147a265dd939d99552b92b5dd9baa9a16f95ae9d5.bin.dll
Resource
win10v20201028
Behavioral task
behavioral7
Sample
202102121641_8600b6aff4ee95d4f78e5dc77f66af3c07241db926b053144943361bc64c37f7.bin.dll
Resource
win7v20201028
Behavioral task
behavioral8
Sample
202102121641_8600b6aff4ee95d4f78e5dc77f66af3c07241db926b053144943361bc64c37f7.bin.dll
Resource
win10v20201028
Behavioral task
behavioral9
Sample
202102121641_ae55975bd40147ab3b9a02f1e2e0279f714bce9845d26ace252cd590a42d733d.bin.dll
Resource
win7v20201028
Behavioral task
behavioral10
Sample
202102121641_ae55975bd40147ab3b9a02f1e2e0279f714bce9845d26ace252cd590a42d733d.bin.dll
Resource
win10v20201028
Behavioral task
behavioral11
Sample
202102121641_c642dca14e48cae8391d5f100304b399b70a9c3967d7b7d3949ead3b96ba1a63.bin.dll
Resource
win7v20201028
Behavioral task
behavioral12
Sample
202102121641_c642dca14e48cae8391d5f100304b399b70a9c3967d7b7d3949ead3b96ba1a63.bin.dll
Resource
win10v20201028
Behavioral task
behavioral13
Sample
202102121641_cc849b895a0c8237f81ca3fe6395929713fb7b3f0a7744d3ddc3cb08f9f4351d.bin.dll
Resource
win7v20201028
Behavioral task
behavioral14
Sample
202102121641_cc849b895a0c8237f81ca3fe6395929713fb7b3f0a7744d3ddc3cb08f9f4351d.bin.dll
Resource
win10v20201028
Behavioral task
behavioral15
Sample
202102121641_f1b9d5520ba13179e19b336e542d18b0bd9f39a2b41d88a739625c8480422b73.bin.dll
Resource
win7v20201028
General
-
Target
202102121641_48eacf290c0ed6287672551fcf426053f754c126c01fe6a01009c0ba599d3b8f.bin.dll
-
Size
430KB
-
MD5
e31f19e922d23d120305a0f4814f823e
-
SHA1
e78cea0939f886834af7844325baf57f500556ed
-
SHA256
48eacf290c0ed6287672551fcf426053f754c126c01fe6a01009c0ba599d3b8f
-
SHA512
7fbec934aa980951c4b05eaa2544a308effc9c4ae7b3f8ef82a7c10d294f96c2a41537eede8b2afe8f20683979145b33cd2e4e5a19ea76ce5f02cf1a0712f555
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes:
regsvr32.exedescription pid process target process PID 4768 wrote to memory of 4944 4768 regsvr32.exe regsvr32.exe PID 4768 wrote to memory of 4944 4768 regsvr32.exe regsvr32.exe PID 4768 wrote to memory of 4944 4768 regsvr32.exe regsvr32.exe
Processes
-
C:\Windows\system32\regsvr32.exeregsvr32 /s C:\Users\Admin\AppData\Local\Temp\202102121641_48eacf290c0ed6287672551fcf426053f754c126c01fe6a01009c0ba599d3b8f.bin.dll1⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\regsvr32.exe/s C:\Users\Admin\AppData\Local\Temp\202102121641_48eacf290c0ed6287672551fcf426053f754c126c01fe6a01009c0ba599d3b8f.bin.dll2⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/4944-2-0x0000000000000000-mapping.dmp