Analysis
-
max time kernel
4294183s -
max time network
134s -
platform
windows7_x64 -
resource
win7-20220311-en -
submitted
25-03-2022 11:23
Behavioral task
behavioral1
Sample
unpacked.dll
Resource
win7-20220311-en
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
unpacked.dll
Resource
win10v2004-en-20220113
windows10-2004_x64
0 signatures
0 seconds
General
-
Target
unpacked.dll
-
Size
56KB
-
MD5
7ab84a63b2d2ee8de160ebedafb3c605
-
SHA1
8045e6d9f1e36ca1bcfddf451668d72035428ab3
-
SHA256
aee8c6b94601d4f82675482aa7d1b85f0d1592df31f7b7c461b55f4e7f758b46
-
SHA512
b37843bed6b3e602d19d31e894e7a753990578fd3f9341b33e54e0996b927ce3614da1e69467c90ddd67b3a910a680b880cec3cfd0afb22adb3afe09e833e9b3
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 7 IoCs
Processes:
regsvr32.exedescription pid process target process PID 1968 wrote to memory of 1944 1968 regsvr32.exe regsvr32.exe PID 1968 wrote to memory of 1944 1968 regsvr32.exe regsvr32.exe PID 1968 wrote to memory of 1944 1968 regsvr32.exe regsvr32.exe PID 1968 wrote to memory of 1944 1968 regsvr32.exe regsvr32.exe PID 1968 wrote to memory of 1944 1968 regsvr32.exe regsvr32.exe PID 1968 wrote to memory of 1944 1968 regsvr32.exe regsvr32.exe PID 1968 wrote to memory of 1944 1968 regsvr32.exe regsvr32.exe