3817720772f336e0a1b850512fcad23d31ccb3099eb46af82bf98328895af665 | Triage

Analysis

max time kernel
42s
max time network
45s
platform
windows7_x64
resource
win7-20220414-en
submitted
24-06-2022 21:02

Sharing

Report Analysis Logs

General

Target

sol3nia/sol3nia.dll
Size

355KB
MD5

88789ba7f00909005b2fe18ce83dbf58
SHA1

08ffb813d1d7544380aa1b0e41703207451e1def
SHA256

00dcc4642d488643856259cd3c576d9e24045b48783fc21ebdccd5fb4de66f8c
SHA512

c78f79bd27a535e2efc1a133bfe92048dc3a77e9b9e6ef0aebab6403835fb585771c4da14493a1bf81a72e0f8340a5db81964e8852b4a3e8d0f9232985cd3478

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1752 1756 WerFault.exe rundll32.exe

Suspicious use of WriteProcessMemory 3 IoCs

Processes:

rundll32.exe

description	pid	process	target process
PID 1756 wrote to memory of 1752	1756	rundll32.exe	WerFault.exe
PID 1756 wrote to memory of 1752	1756	rundll32.exe	WerFault.exe
PID 1756 wrote to memory of 1752	1756	rundll32.exe	WerFault.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\sol3nia\sol3nia.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:1756

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -u -p 1756 -s 92
2⤵
- Program crash
PID:1752

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1752-54-0x0000000000000000-mapping.dmp

Download