5afe9ceed5b1621f8e7ec220ce552b11acd274df677dd7dd1aacfef671039832 | Triage™

Analysis

max time kernel
23s
max time network
24s
platform
windows10-2004_x64
resource
win10v2004-en-20220113
submitted
02/02/2022, 09:48

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
aW58sHsS3ViXbreO.dll
Size 252KB
Sample220202-lssecshfdj
SHA256 5afe9ceed5b1621f8e7ec220ce552b11acd274df677dd7dd1aacfef671039832
MD5 0dacd06cbd01a91fcd605d02fb2b8631
SHA1 54eebe43f74e5015d0db2845c58dc7939a8778db
SHA512 d401269cf8004e86bd9b3700a6441bbea862b7ba7874cdf1e3e3e6d0fd304005d65b52e2b4bf586cb6d9a2db798f93837b67bbc968f32eed8ed48c6cc4de3d5d
MD5 SHA1 SHA512

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 4500 wrote to memory of 4312	4500	regsvr32.exe	82
PID 4500 wrote to memory of 4312	4500	regsvr32.exe	82
PID 4500 wrote to memory of 4312	4500	regsvr32.exe	82

C:\Windows\system32\regsvr32.exe
regsvr32 /s C:\Users\Admin\AppData\Local\Temp\aW58sHsS3ViXbreO.dll
1⤵
- Suspicious use of WriteProcessMemory
PID:4500
- C:\Windows\SysWOW64\regsvr32.exe
  /s C:\Users\Admin\AppData\Local\Temp\aW58sHsS3ViXbreO.dll
  2⤵
  PID:4312

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads