df3be074ec29d4373697d4c3e6b0d4acaeabc1eb8478d2dcfd4d9c651e82d9c5 | Triage™

Analysis

max time kernel
23s
max time network
34s
platform
windows10-2004_x64
resource
win10v2004-en-20220113
submitted
03/02/2022, 15:44

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
710e2b82983665fcc0888b27db219d5d.dll
Size 979KB
Sample220203-s6hkmsbdbl
SHA256 df3be074ec29d4373697d4c3e6b0d4acaeabc1eb8478d2dcfd4d9c651e82d9c5
MD5 710e2b82983665fcc0888b27db219d5d
SHA1 056b569748db1216458394ebbf6fa7aab4c937e7
SHA512 7bf59b9f0158e0b86bcd8caca6d565a27b54789f7427984a52e7e11f5bb74a651cdaa73397848cc4ac5c7a6e67a137009d2a200d2b431fa88b836885cd2403d3
MD5 SHA1 SHA512

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 4504 wrote to memory of 60	4504	regsvr32.exe	82
PID 4504 wrote to memory of 60	4504	regsvr32.exe	82
PID 4504 wrote to memory of 60	4504	regsvr32.exe	82

C:\Windows\system32\regsvr32.exe
regsvr32 /s C:\Users\Admin\AppData\Local\Temp\710e2b82983665fcc0888b27db219d5d.dll
1⤵
- Suspicious use of WriteProcessMemory
PID:4504
- C:\Windows\SysWOW64\regsvr32.exe
  /s C:\Users\Admin\AppData\Local\Temp\710e2b82983665fcc0888b27db219d5d.dll
  2⤵
  PID:60

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads