Analysis

  • max time kernel
    38s
  • max time network
    41s
  • platform
    windows7_x64
  • resource
    win7-20220414-en
  • submitted
    14/06/2022, 08:44

General

  • Target

    1100-57-0x0000000000170000-0x00000000001DF000-memory.dll

  • Size

    444KB

  • MD5

    7de591e789330b7e552afc08dfa10db6

  • SHA1

    c633f35133aaaabf33e3715f6c96c2009775f328

  • SHA256

    c0c459564513d0d1885e1d9a9ec3b452b805c95b81a91b2fd1b51176c0f49f58

  • SHA512

    fbcb92d37c865a9726e7d0e208c567dc38566ab2260f8d89e31c8cf6c8305b8b9f23af9d6de982f38e09274ef142855023af8295400d437db9082d1ab575f3cf

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs
  • Suspicious use of WriteProcessMemory 11 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\1100-57-0x0000000000170000-0x00000000001DF000-memory.dll,#1
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:840
    • C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\1100-57-0x0000000000170000-0x00000000001DF000-memory.dll,#1
      2⤵
      • Suspicious use of WriteProcessMemory
      PID:2032
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 2032 -s 196
        3⤵
        • Program crash
        PID:848

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/2032-55-0x0000000075221000-0x0000000075223000-memory.dmp

          Filesize

          8KB