c2361aca3534a19af8ff13dfbb2145b1eb97ffcd8999d9865ef72ea5f773d6b9 | Triage™

Analysis

max time kernel
15s
max time network
18s
platform
windows10-2004_x64
resource
win10v2004-en-20220113
submitted
02/02/2022, 15:52

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
7a1bc8fea7a3da843f847e0e7e7220d8.dll
Size 252KB
Sample220202-ta25vaafbn
SHA256 c2361aca3534a19af8ff13dfbb2145b1eb97ffcd8999d9865ef72ea5f773d6b9
MD5 7a1bc8fea7a3da843f847e0e7e7220d8
SHA1 4fd61f51ad02b9ec280b936564f14ee0294629fa
SHA512 f478949b47baab7c5ac915c019c3a8904f759d84641faba3e60f901a53fb8f9f3f5125b5f0a01f55d00b811d91d1063c7b89942a557647b41302eca0efbc5eba
MD5 SHA1 SHA512

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 3448 wrote to memory of 4748	3448	regsvr32.exe	82
PID 3448 wrote to memory of 4748	3448	regsvr32.exe	82
PID 3448 wrote to memory of 4748	3448	regsvr32.exe	82

C:\Windows\system32\regsvr32.exe
regsvr32 /s C:\Users\Admin\AppData\Local\Temp\7a1bc8fea7a3da843f847e0e7e7220d8.dll
1⤵
- Suspicious use of WriteProcessMemory
PID:3448
- C:\Windows\SysWOW64\regsvr32.exe
  /s C:\Users\Admin\AppData\Local\Temp\7a1bc8fea7a3da843f847e0e7e7220d8.dll
  2⤵
  PID:4748

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads