cbce9edcf7e58a0e502e2eeb4f528d2bc18ba956699b1140b8beeb974637201f | Triage™

Analysis

max time kernel
48s
max time network
96s
platform
windows10-2004_x64
resource
win10v2004-en-20220113
submitted
03/02/2022, 20:11

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
f13356257a8ef932e65ef0f2e5b3b80e.dll
Size 982KB
Sample220203-yybd9addgl
SHA256 cbce9edcf7e58a0e502e2eeb4f528d2bc18ba956699b1140b8beeb974637201f
MD5 f13356257a8ef932e65ef0f2e5b3b80e
SHA1 2d0c6e0ec8a20a9c66b804de9bc588bd8fbd7db5
SHA512 e4c3fab6205abbf8db424536bdda165eba84e57b758fd67e86f528648ae79a49098c8fdab122d9bff8c07bf4b21b553129225248959c9b85debfb0e9224b5770
MD5 SHA1 SHA512

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 3460 wrote to memory of 4400	3460	regsvr32.exe	82
PID 3460 wrote to memory of 4400	3460	regsvr32.exe	82
PID 3460 wrote to memory of 4400	3460	regsvr32.exe	82

C:\Windows\system32\regsvr32.exe
regsvr32 /s C:\Users\Admin\AppData\Local\Temp\f13356257a8ef932e65ef0f2e5b3b80e.dll
1⤵
- Suspicious use of WriteProcessMemory
PID:3460
- C:\Windows\SysWOW64\regsvr32.exe
  /s C:\Users\Admin\AppData\Local\Temp\f13356257a8ef932e65ef0f2e5b3b80e.dll
  2⤵
  PID:4400

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads