fea193a3900f4ecf23c67876f1e37fbc351697b0738d4ce6c29d3899cd689b3f | Triage™

Analysis

max time kernel
17s
max time network
30s
platform
windows10-2004_x64
resource
win10v2004-en-20220113
submitted
03/02/2022, 16:00

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
bee63ab08b4901cc8ab90b4fef9a8089.dll
Size 979KB
Sample220203-tfpfyabeep
SHA256 fea193a3900f4ecf23c67876f1e37fbc351697b0738d4ce6c29d3899cd689b3f
MD5 bee63ab08b4901cc8ab90b4fef9a8089
SHA1 74d4e1283299cf976653cb1db7ffd27801f1e655
SHA512 c25237b2d5e83e64bbe5656c05b3fa729de795598cbc73c207ef519589c9a03143a4a5239d8bb2f449b2acafedc18ae57d2d69d4ad7efebd7fc636a91347dee1
MD5 SHA1 SHA512

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 4868 wrote to memory of 4084	4868	regsvr32.exe	81
PID 4868 wrote to memory of 4084	4868	regsvr32.exe	81
PID 4868 wrote to memory of 4084	4868	regsvr32.exe	81

C:\Windows\system32\regsvr32.exe
regsvr32 /s C:\Users\Admin\AppData\Local\Temp\bee63ab08b4901cc8ab90b4fef9a8089.dll
1⤵
- Suspicious use of WriteProcessMemory
PID:4868
- C:\Windows\SysWOW64\regsvr32.exe
  /s C:\Users\Admin\AppData\Local\Temp\bee63ab08b4901cc8ab90b4fef9a8089.dll
  2⤵
  PID:4084

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads