2ddc95bdefc8b2ed6a0be6a470279e26d9c387ad164610ab0028116241697a1a | Triage

Analysis

max time kernel
45s
max time network
48s
platform
windows7_x64
resource
win7-20220414-en
submitted
06-07-2022 13:56

Sharing

Report Analysis Logs

General

Target

o7m2se.dll
Size

1.5MB
MD5

d808582a5e6f1552c7c9b73a78d85730
SHA1

fa43018b94a710ae297ababf973d7bcfc241fbb2
SHA256

b7668bc3a19d39e11ca96e22acc77b4ab5ebb8aeac59235299c6008959129929
SHA512

f0e2d1ecd9e287cdd1f6b846d08adc129ed301612f174c09b31d984fcea3912daa9d65f8497e6a0e289869bb634359d5e8cb01455566aca3234682c7f968792b

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
908	1600	WerFault.exe	23

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1600 wrote to memory of 908	1600	rundll32.exe	27
PID 1600 wrote to memory of 908	1600	rundll32.exe	27
PID 1600 wrote to memory of 908	1600	rundll32.exe	27

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\o7m2se.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:1600
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 1600 -s 84
  2⤵
  - Program crash
  PID:908

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads