91c96360ae21df783a98ded6dca0cf027a1b1fdd7fbdd201fa56894ffb9f47a4 | Triage™

Analysis

max time kernel
11s
max time network
152s
platform
windows10_x64
resource
win10v20210410
submitted
22/06/2021, 06:37

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
41d7eb38fd86e069dcc0057ac62b8860.dll
Size 277KB
Sample210622-crd6x4fl72
SHA256 91c96360ae21df783a98ded6dca0cf027a1b1fdd7fbdd201fa56894ffb9f47a4
MD5 41d7eb38fd86e069dcc0057ac62b8860
SHA1 708fe8f4c20558b9fd5c66f438f6d9a916c9c30b
SHA512 ff0e7175810f46bfd145a0bbef501eca2c7a5f1c34a72fad059da877c04eea9d620fb74e3c2c1d889dc91d2e3b0dc144e4d78bc16088cfad9b6b68e107357a7d
MD5 SHA1 SHA512

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 3944 wrote to memory of 692	3944	regsvr32.exe	69
PID 3944 wrote to memory of 692	3944	regsvr32.exe	69
PID 3944 wrote to memory of 692	3944	regsvr32.exe	69

C:\Windows\system32\regsvr32.exe
regsvr32 /s C:\Users\Admin\AppData\Local\Temp\41d7eb38fd86e069dcc0057ac62b8860.dll
1⤵
- Suspicious use of WriteProcessMemory
PID:3944
- C:\Windows\SysWOW64\regsvr32.exe
  /s C:\Users\Admin\AppData\Local\Temp\41d7eb38fd86e069dcc0057ac62b8860.dll
  2⤵
  PID:692

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads