Analysis

  • max time kernel
    120s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-en-20211014
  • submitted
    13-11-2021 17:36

General

  • Target

    d6caf64597bd5e0803f7d0034e73195e83dae370450a2e890b82f77856830167.dll

  • Size

    76KB

  • MD5

    e8ae3940c30296d494e534e0379f15d6

  • SHA1

    3bcb5e7bc9c317c3c067f36d7684a419da79506c

  • SHA256

    d6caf64597bd5e0803f7d0034e73195e83dae370450a2e890b82f77856830167

  • SHA512

    d07b8e684fc1c7a103b64b46d777091bb79103448e91f862c12f0080435feff1c9e907472b7fd4e236ff0b0a8e90dbbaaac202e2238f95578fed1ff6f5247386

Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 7 IoCs

Processes

  • C:\Windows\system32\regsvr32.exe
    regsvr32 /s C:\Users\Admin\AppData\Local\Temp\d6caf64597bd5e0803f7d0034e73195e83dae370450a2e890b82f77856830167.dll
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1156
    • C:\Windows\SysWOW64\regsvr32.exe
      /s C:\Users\Admin\AppData\Local\Temp\d6caf64597bd5e0803f7d0034e73195e83dae370450a2e890b82f77856830167.dll
      2⤵
        PID:948

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/948-57-0x0000000076531000-0x0000000076533000-memory.dmp

      Filesize

      8KB

    • memory/1156-55-0x000007FEFC3C1000-0x000007FEFC3C3000-memory.dmp

      Filesize

      8KB