20baf6a5e1b2f60b533c862fa5e28b73ddcb71aba815d874cb2dec901b796964 | Triage™

Analysis

max time kernel
52s
max time network
66s
platform
windows10-2004_x64
resource
win10v2004-en-20220113
submitted
07/02/2022, 12:05

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
d3c6eacf887c21b05423e47eb0416dd9.dll
Size 1.0MB
Sample220207-n9bjaacba9
SHA256 20baf6a5e1b2f60b533c862fa5e28b73ddcb71aba815d874cb2dec901b796964
MD5 d3c6eacf887c21b05423e47eb0416dd9
SHA1 9878b504ef645049f2b210a5acd4aba3a8e8b73b
SHA512 a8b58814acac115b45457a916fa2bec2ae348caf292a3245f73387f2344b8014e6eb75c0347d5a90245de2796de7cbc44eb5618fce01bea997ae18e6c4602dce
MD5 SHA1 SHA512

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 3228 wrote to memory of 4656	3228	regsvr32.exe	82
PID 3228 wrote to memory of 4656	3228	regsvr32.exe	82
PID 3228 wrote to memory of 4656	3228	regsvr32.exe	82

C:\Windows\system32\regsvr32.exe
regsvr32 /s C:\Users\Admin\AppData\Local\Temp\d3c6eacf887c21b05423e47eb0416dd9.dll
1⤵
- Suspicious use of WriteProcessMemory
PID:3228
- C:\Windows\SysWOW64\regsvr32.exe
  /s C:\Users\Admin\AppData\Local\Temp\d3c6eacf887c21b05423e47eb0416dd9.dll
  2⤵
  PID:4656

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads