151a86815dff16475b02f38cae265fa445ada8c34a5ae7cd5d6f8f829f4f2e3e | Triage™

Analysis

max time kernel
7s
max time network
14s
platform
windows10-2004_x64
resource
win10v2004-en-20220113
submitted
02/02/2022, 18:51

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
3E4TvO7KR.dll
Size 988KB
Sample220202-xhhmysbbdj
SHA256 151a86815dff16475b02f38cae265fa445ada8c34a5ae7cd5d6f8f829f4f2e3e
MD5 12f4d60985cd4c58294b9cec8bfb3e63
SHA1 462bdfd28226b52621fe19cc3b3dabd1cf4a5e3b
SHA512 0d5f616c955d3700b78a130b132315324f0ff817c17e43fc893d32255bc4f2f8448dbc0d7d8975f7167b1d6510ee5bc721867ff7032061e3c0518eccfd442ce5
MD5 SHA1 SHA512

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 4336 wrote to memory of 4608	4336	regsvr32.exe	84
PID 4336 wrote to memory of 4608	4336	regsvr32.exe	84
PID 4336 wrote to memory of 4608	4336	regsvr32.exe	84

C:\Windows\system32\regsvr32.exe
regsvr32 /s C:\Users\Admin\AppData\Local\Temp\3E4TvO7KR.dll
1⤵
- Suspicious use of WriteProcessMemory
PID:4336
- C:\Windows\SysWOW64\regsvr32.exe
  /s C:\Users\Admin\AppData\Local\Temp\3E4TvO7KR.dll
  2⤵
  PID:4608

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads