d1c4dbe21ff49a90391fe3fbe2be2da278a498f7701e577402dd2f6664e63d9e | Triage™

Analysis

max time kernel
20s
max time network
24s
platform
windows10-2004_x64
resource
win10v2004-en-20220113
submitted
02/02/2022, 19:38

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
0e5dd9cb85bd2a65a45310517d356e73.dll
Size 988KB
Sample220202-ycdx9abdf8
SHA256 d1c4dbe21ff49a90391fe3fbe2be2da278a498f7701e577402dd2f6664e63d9e
MD5 0e5dd9cb85bd2a65a45310517d356e73
SHA1 70c39d774e4f2fb56afa2278227d5346ab8cd80b
SHA512 f589286caf34f244bfa365f52c091c3675ddb5ad7d39905c1420136d8cf8588f1332f1b885e1b59725202e117e7c5a43a3c360669cf2e07829abeb2febc90de9
MD5 SHA1 SHA512

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2752 wrote to memory of 3816	2752	regsvr32.exe	81
PID 2752 wrote to memory of 3816	2752	regsvr32.exe	81
PID 2752 wrote to memory of 3816	2752	regsvr32.exe	81

C:\Windows\system32\regsvr32.exe
regsvr32 /s C:\Users\Admin\AppData\Local\Temp\0e5dd9cb85bd2a65a45310517d356e73.dll
1⤵
- Suspicious use of WriteProcessMemory
PID:2752
- C:\Windows\SysWOW64\regsvr32.exe
  /s C:\Users\Admin\AppData\Local\Temp\0e5dd9cb85bd2a65a45310517d356e73.dll
  2⤵
  PID:3816

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads