1f02b0729ebc293d38d09ee161433e5fdfe4fa7371b4cf2279fcacafb23f717b | Triage™

Analysis

max time kernel
39s
max time network
65s
platform
windows10-2004_x64
resource
win10v2004-en-20220113
submitted
04/02/2022, 17:50

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
5416f0daf6507e5317255c4460034c47.dll
Size 997KB
Sample220204-weksgadcd5
SHA256 1f02b0729ebc293d38d09ee161433e5fdfe4fa7371b4cf2279fcacafb23f717b
MD5 5416f0daf6507e5317255c4460034c47
SHA1 8d2bfb60035914ec75e12b9242643de49db59a6e
SHA512 4e612921e6402e89ecb7a015ad9a4e45d92846b60c111d75707e300c4e436451259e03dcf473acf144179a7a1d8d4848beeb473815493bc83064e315d5ea348b
MD5 SHA1 SHA512

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2764 wrote to memory of 764	2764	regsvr32.exe	81
PID 2764 wrote to memory of 764	2764	regsvr32.exe	81
PID 2764 wrote to memory of 764	2764	regsvr32.exe	81

C:\Windows\system32\regsvr32.exe
regsvr32 /s C:\Users\Admin\AppData\Local\Temp\5416f0daf6507e5317255c4460034c47.dll
1⤵
- Suspicious use of WriteProcessMemory
PID:2764
- C:\Windows\SysWOW64\regsvr32.exe
  /s C:\Users\Admin\AppData\Local\Temp\5416f0daf6507e5317255c4460034c47.dll
  2⤵
  PID:764

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads