87fa46f0382d32538919681187e14c3ddf7d3e01bdd45c5aeeb053cfb6d64061 | Triage

Analysis

max time kernel
2s
max time network
58s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
30-06-2022 20:21

Sharing

Report Analysis Logs

General

Target

a37d86dd40fa94b53850c9190846fea8.dll
Size

548KB
MD5

a37d86dd40fa94b53850c9190846fea8
SHA1

25209a9229d20812bdc5ae78d1f276193604aab2
SHA256

87fa46f0382d32538919681187e14c3ddf7d3e01bdd45c5aeeb053cfb6d64061
SHA512

172382767fd0a81e6a6776adc4dada3619e9affe3cbadf1a154d185125092c5c4a0e6a64fed9fc5bf04f3c25abde97a6280e7431735033a22c09562538196122

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 2 IoCs

Processes:

regsvr32.exe

pid process

1252 regsvr32.exe
1252 regsvr32.exe

C:\Windows\system32\regsvr32.exe
regsvr32 /s C:\Users\Admin\AppData\Local\Temp\a37d86dd40fa94b53850c9190846fea8.dll
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:1252

C:\Windows\system32\regsvr32.exe
C:\Windows\system32\regsvr32.exe "C:\Windows\system32\JmAhSSPuiEi\CTXntwPJ.dll"
2⤵
PID:1020

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1020-134-0x0000000000000000-mapping.dmp

Download
memory/1252-130-0x00000000009B0000-0x0000000000A0A000-memory.dmp

Filesize
360KB

Download