8235f6283515ea785e7bd5c94f2b55b192dffb161f4e943e8ac7d1c5dd9a2554 | Triage™

Analysis

max time kernel
16s
max time network
22s
platform
windows10-2004_x64
resource
win10v2004-en-20220113
submitted
03/02/2022, 09:06

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Px2.dll
Size 988KB
Sample220203-k2swtafaa9
SHA256 8235f6283515ea785e7bd5c94f2b55b192dffb161f4e943e8ac7d1c5dd9a2554
MD5 8a7ffee4be62c64da7b4293bb7be7cb4
SHA1 bc5787d99064d1cf10688ae454eaa638dafc53ab
SHA512 629a2085692645f9235f71c4fd4dd969e0036dff3e35f07531546a3e0fdf5341ed212e108c391e9c2699e10d2740231d722dbe02df17cf342a0bc4a2ce88ace2
MD5 SHA1 SHA512

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1556 wrote to memory of 1424	1556	regsvr32.exe	82
PID 1556 wrote to memory of 1424	1556	regsvr32.exe	82
PID 1556 wrote to memory of 1424	1556	regsvr32.exe	82

C:\Windows\system32\regsvr32.exe
regsvr32 /s C:\Users\Admin\AppData\Local\Temp\Px2.dll
1⤵
- Suspicious use of WriteProcessMemory
PID:1556
- C:\Windows\SysWOW64\regsvr32.exe
  /s C:\Users\Admin\AppData\Local\Temp\Px2.dll
  2⤵
  PID:1424

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads