55bd46ad5c7cc0dc1d56639a1703a9efd38d7618db22fed3ad412b763967965e | Triage™

Analysis

max time kernel
10s
max time network
34s
platform
windows10-2004_x64
resource
win10v2004-en-20220113
submitted
03/02/2022, 10:13

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
8d705516828c4d6a4ee7dfb9de4478b9.dll
Size 979KB
Sample220203-l9jhsafea6
SHA256 55bd46ad5c7cc0dc1d56639a1703a9efd38d7618db22fed3ad412b763967965e
MD5 8d705516828c4d6a4ee7dfb9de4478b9
SHA1 d00693ecf6ed2002f513346a7a8fa616229ca2b3
SHA512 6acd1075f2676463ec24f6f14cfa83402ad22ccc1989608f10f2c696cd22bbfda38f59139a7fcac0c2687596bfc2c8c476cadc75d844585a074cf536eff68220
MD5 SHA1 SHA512

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 4476 wrote to memory of 4488	4476	regsvr32.exe	82
PID 4476 wrote to memory of 4488	4476	regsvr32.exe	82
PID 4476 wrote to memory of 4488	4476	regsvr32.exe	82

C:\Windows\system32\regsvr32.exe
regsvr32 /s C:\Users\Admin\AppData\Local\Temp\8d705516828c4d6a4ee7dfb9de4478b9.dll
1⤵
- Suspicious use of WriteProcessMemory
PID:4476
- C:\Windows\SysWOW64\regsvr32.exe
  /s C:\Users\Admin\AppData\Local\Temp\8d705516828c4d6a4ee7dfb9de4478b9.dll
  2⤵
  PID:4488

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads