9e47449e4717cf5e37af1b6763490ec0e8e144a0bbd3128d2495aeecb67df23d | Triage™

Analysis

max time kernel
26s
max time network
39s
platform
windows10-2004_x64
resource
win10v2004-en-20220113
submitted
03/02/2022, 10:09

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
4fd39b18f377e1141c27b85a732e7aef.dll
Size 988KB
Sample220203-l67ffafcfq
SHA256 9e47449e4717cf5e37af1b6763490ec0e8e144a0bbd3128d2495aeecb67df23d
MD5 4fd39b18f377e1141c27b85a732e7aef
SHA1 fcbb8071461bd00d63e77f02919eea2a640cfceb
SHA512 2a2ea6d7c53ee6beb570bae9eca0f3575fcdba4d170de4537ba6bd3e281fc6658c1c01c2523f99dd6f8c605425ee776c2e641890a6cd9fd3be89b86ff77aa821
MD5 SHA1 SHA512

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 4804 wrote to memory of 460	4804	regsvr32.exe	84
PID 4804 wrote to memory of 460	4804	regsvr32.exe	84
PID 4804 wrote to memory of 460	4804	regsvr32.exe	84

C:\Windows\system32\regsvr32.exe
regsvr32 /s C:\Users\Admin\AppData\Local\Temp\4fd39b18f377e1141c27b85a732e7aef.dll
1⤵
- Suspicious use of WriteProcessMemory
PID:4804
- C:\Windows\SysWOW64\regsvr32.exe
  /s C:\Users\Admin\AppData\Local\Temp\4fd39b18f377e1141c27b85a732e7aef.dll
  2⤵
  PID:460

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads