4bdd69925a34e9cf93b3358bcdfe256c3ce432e4566e66008405b69c19b5b09b | Triage™

Analysis

max time kernel
45s
max time network
87s
platform
windows10-2004_x64
resource
win10v2004-en-20220113
submitted
04/02/2022, 17:50

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
04ce93644948231ad1ba5dc8e2144cac.dll
Size 997KB
Sample220204-weksgadcd4
SHA256 4bdd69925a34e9cf93b3358bcdfe256c3ce432e4566e66008405b69c19b5b09b
MD5 04ce93644948231ad1ba5dc8e2144cac
SHA1 8285d2bf9406a63d1023a9e2d92ffcf9d2d9c191
SHA512 f8613c96f3a5daefa7b517bf3a534b520560bb536438a19c82c45e50a9d834bfd3f03a82fc091a0655f166640a2679b640eb82a6bf9bba74b02a353fdf448bcf
MD5 SHA1 SHA512

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1816 wrote to memory of 2480	1816	regsvr32.exe	82
PID 1816 wrote to memory of 2480	1816	regsvr32.exe	82
PID 1816 wrote to memory of 2480	1816	regsvr32.exe	82

C:\Windows\system32\regsvr32.exe
regsvr32 /s C:\Users\Admin\AppData\Local\Temp\04ce93644948231ad1ba5dc8e2144cac.dll
1⤵
- Suspicious use of WriteProcessMemory
PID:1816
- C:\Windows\SysWOW64\regsvr32.exe
  /s C:\Users\Admin\AppData\Local\Temp\04ce93644948231ad1ba5dc8e2144cac.dll
  2⤵
  PID:2480

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads