Analysis
-
max time kernel
1s -
max time network
19s -
platform
windows10-2004_x64 -
resource
win10v2004-en-20220113 -
submitted
20-01-2022 16:43
Static task
static1
Behavioral task
behavioral1
Sample
us.dll
Resource
win7-en-20211208
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
us.dll
Resource
win10v2004-en-20220113
0 signatures
0 seconds
General
-
Target
us.dll
-
Size
844KB
-
MD5
ba8812816a3996e9c1efcc2619e54afd
-
SHA1
7bf1daf34d94a332c5e2a177f6a1a08fcd6d8605
-
SHA256
934eec008c02c1f626a801341aea72172e4bad99bc7737ab63a0158921e20467
-
SHA512
a66cf0e8324ee4be30ba4f786f1c9a821726cb52cb7becdabb2b2765cef2c8135bd66ae1be6e448744c7345a8e64e9c35af5560c0a6bffc9b186693ef143ea50
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes:
regsvr32.exedescription pid process target process PID 2868 wrote to memory of 3180 2868 regsvr32.exe regsvr32.exe PID 2868 wrote to memory of 3180 2868 regsvr32.exe regsvr32.exe PID 2868 wrote to memory of 3180 2868 regsvr32.exe regsvr32.exe