e97a7be5b3f144386968310b75635b2c8bbbaa78ac0637c8b18c2b2c316990b2 | Triage™

Analysis

max time kernel
10s
max time network
21s
platform
windows10-2004_x64
resource
win10v2004-en-20220113
submitted
03/02/2022, 13:12

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
vbkwk.dll
Size 979KB
Sample220203-qfhfvahef4
SHA256 e97a7be5b3f144386968310b75635b2c8bbbaa78ac0637c8b18c2b2c316990b2
MD5 82a5659b0c7b578c6a8ae5fa5831fc13
SHA1 84f4f289e8122438486d0862de8d79be4b95702b
SHA512 aaa2eb6fc61fae03137b9ccbaa32af38407fa1e68eb5220ea40eddbf3c81966cec75b5be376693ba0cdf9f546ca25f1e76b20bbda142d7997588930bc0ed405d
MD5 SHA1 SHA512

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 4288 wrote to memory of 4736	4288	regsvr32.exe	82
PID 4288 wrote to memory of 4736	4288	regsvr32.exe	82
PID 4288 wrote to memory of 4736	4288	regsvr32.exe	82

C:\Windows\system32\regsvr32.exe
regsvr32 /s C:\Users\Admin\AppData\Local\Temp\vbkwk.dll
1⤵
- Suspicious use of WriteProcessMemory
PID:4288
- C:\Windows\SysWOW64\regsvr32.exe
  /s C:\Users\Admin\AppData\Local\Temp\vbkwk.dll
  2⤵
  PID:4736

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads