cd03d281a9f7c83b5f436f9f4e84573f9b52cbb450f5f72c55238516e805a5fb | Triage™

Analysis

max time kernel
11s
max time network
7s
platform
windows10-2004_x64
resource
win10v2004-en-20220113
submitted
03/02/2022, 16:00

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
64ef9f83d875795d3e70f6269f55619d.dll
Size 972KB
Sample220203-tfpfyabdc5
SHA256 cd03d281a9f7c83b5f436f9f4e84573f9b52cbb450f5f72c55238516e805a5fb
MD5 64ef9f83d875795d3e70f6269f55619d
SHA1 3a22fc165e39cf9639b055ccfcf857af7b3b5018
SHA512 691a90c693d8386b7b3c80337a528c56f0c4a116a405583260007f669d468889edc5465d0c23e265cbd249165971e5763b7326bd49b48dd2cb6f94f797824b2a
MD5 SHA1 SHA512

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 952 wrote to memory of 1320	952	regsvr32.exe	82
PID 952 wrote to memory of 1320	952	regsvr32.exe	82
PID 952 wrote to memory of 1320	952	regsvr32.exe	82

C:\Windows\system32\regsvr32.exe
regsvr32 /s C:\Users\Admin\AppData\Local\Temp\64ef9f83d875795d3e70f6269f55619d.dll
1⤵
- Suspicious use of WriteProcessMemory
PID:952
- C:\Windows\SysWOW64\regsvr32.exe
  /s C:\Users\Admin\AppData\Local\Temp\64ef9f83d875795d3e70f6269f55619d.dll
  2⤵
  PID:1320

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads