Resubmissions

21-09-2021 13:24

210921-qne1paccdj 10

13-09-2021 16:36

210913-t4p3dahbgm 4

Analysis

  • max time kernel
    81s
  • max time network
    148s
  • platform
    windows10_x64
  • resource
    win10-en
  • submitted
    13-09-2021 16:36

General

  • Target

    090921.gif.dll

  • Size

    383KB

  • MD5

    479dae0f72f4d57bd20e0bf8cb3ebdf7

  • SHA1

    b49f31a7d8f68ca307f3d0abcf4d05313ee2b844

  • SHA256

    4f68558fb7a921b837926ca4e87fecba073f551a44c88109453a1a8099d003b6

  • SHA512

    afb0a6fc0c7783f04a22ec721543084e0532f87c7903c42b831c8954aceb231b099f87c3da3edabd1c9b36045cc4b3747b27e386f37b3fbac349c0036717d63d

Score
4/10

Malware Config

Signatures

  • Drops file in Windows directory 1 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Windows\system32\regsvr32.exe
    regsvr32 /s C:\Users\Admin\AppData\Local\Temp\090921.gif.dll
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:3992
    • C:\Windows\SysWOW64\regsvr32.exe
      /s C:\Users\Admin\AppData\Local\Temp\090921.gif.dll
      2⤵
      • Drops file in Windows directory
      PID:4016

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4016-116-0x0000000000D90000-0x0000000000D91000-memory.dmp

    Filesize

    4KB

  • memory/4016-117-0x0000000010000000-0x000000001005E000-memory.dmp

    Filesize

    376KB