081a1b4e6accdee186f8f1c3726ca96d79146f612d9f40f724e89b9cf81bc4a8 | Triage™

Analysis

max time kernel
129s
max time network
130s
platform
windows10_x64
resource
win10v20201028
submitted
24/03/2021, 16:59

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
3d12839a55da685a009afb7cabe21720.dll
Size 1.2MB
Sample210324-7b66bre43n
SHA256 081a1b4e6accdee186f8f1c3726ca96d79146f612d9f40f724e89b9cf81bc4a8
MD5 3d12839a55da685a009afb7cabe21720
SHA1 a71dbeb7546fbae7a3a257ca3927f79ed25f8e53
SHA512 5f0ee2969da11145a3d7b09fb89b9a533c1d276fdadc7666a6b985c964bca030261a69c9e83d8973e137264bae4c4732250ba223903298afddcb90cffe572c4c
MD5 SHA1 SHA512

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1048 wrote to memory of 2452	1048	regsvr32.exe	73
PID 1048 wrote to memory of 2452	1048	regsvr32.exe	73
PID 1048 wrote to memory of 2452	1048	regsvr32.exe	73

C:\Windows\system32\regsvr32.exe
regsvr32 /s C:\Users\Admin\AppData\Local\Temp\3d12839a55da685a009afb7cabe21720.dll
1⤵
- Suspicious use of WriteProcessMemory
PID:1048
- C:\Windows\SysWOW64\regsvr32.exe
  /s C:\Users\Admin\AppData\Local\Temp\3d12839a55da685a009afb7cabe21720.dll
  2⤵
  PID:2452

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads