eaf8a59ec22f413eb9f233f605b7ee422c23556c54ebec65173e544204e9f3a9 | Triage™

Analysis

max time kernel
44s
max time network
79s
platform
windows10-2004_x64
resource
win10v2004-en-20220113
submitted
04/02/2022, 19:21

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
40476cc6f3d51139bafa2e9495554f2e.dll
Size 1.0MB
Sample220204-x2m2saecf5
SHA256 eaf8a59ec22f413eb9f233f605b7ee422c23556c54ebec65173e544204e9f3a9
MD5 40476cc6f3d51139bafa2e9495554f2e
SHA1 2791e8d813984679154274ccdcfc2436b917d5cc
SHA512 6f38bb96fa006502ddeebe8a21c54e78ec9cbd0706ecd98409138e6bf5c9c9af6ca1603b1ff5ec4a377bdd59ecf44b4620c20bb768e35ec2e0ea3eb73808d13a
MD5 SHA1 SHA512

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2008 wrote to memory of 4504	2008	regsvr32.exe	81
PID 2008 wrote to memory of 4504	2008	regsvr32.exe	81
PID 2008 wrote to memory of 4504	2008	regsvr32.exe	81

C:\Windows\system32\regsvr32.exe
regsvr32 /s C:\Users\Admin\AppData\Local\Temp\40476cc6f3d51139bafa2e9495554f2e.dll
1⤵
- Suspicious use of WriteProcessMemory
PID:2008
- C:\Windows\SysWOW64\regsvr32.exe
  /s C:\Users\Admin\AppData\Local\Temp\40476cc6f3d51139bafa2e9495554f2e.dll
  2⤵
  PID:4504

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads