a706fda6762548c7dd3ebe695852cebfc54ce62278befb3dd4dfec2a6044cbff | Triage™

Analysis

max time kernel
40s
max time network
61s
platform
windows10-2004_x64
resource
win10v2004-en-20220113
submitted
07/02/2022, 12:58

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
b58202e40ffc332d6b88dea9d79015f2.dll
Size 1.0MB
Sample220207-p7hegscdd6
SHA256 a706fda6762548c7dd3ebe695852cebfc54ce62278befb3dd4dfec2a6044cbff
MD5 b58202e40ffc332d6b88dea9d79015f2
SHA1 38d9dab650cd70256b0b1d2bb60b29a8668322b6
SHA512 d459b0b6253d252ee32d6fd20ee76189266c1c989ffb0c88d1856bfb39395fcc1ed2be850744ddabe3da6b1a018f02746b091b24e4485d1886be9665813ced78
MD5 SHA1 SHA512

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1608 wrote to memory of 1980	1608	regsvr32.exe	82
PID 1608 wrote to memory of 1980	1608	regsvr32.exe	82
PID 1608 wrote to memory of 1980	1608	regsvr32.exe	82

C:\Windows\system32\regsvr32.exe
regsvr32 /s C:\Users\Admin\AppData\Local\Temp\b58202e40ffc332d6b88dea9d79015f2.dll
1⤵
- Suspicious use of WriteProcessMemory
PID:1608
- C:\Windows\SysWOW64\regsvr32.exe
  /s C:\Users\Admin\AppData\Local\Temp\b58202e40ffc332d6b88dea9d79015f2.dll
  2⤵
  PID:1980

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads