Analysis

  • max time kernel
    34s
  • max time network
    44s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    19/09/2022, 12:03

General

  • Target

    9d77c41646171e427e4693f8a74fe1a91fecb40663719ba2133f1c1144536760.dll

  • Size

    35KB

  • MD5

    025efd5e25602d0b75b6a9975dcfbf51

  • SHA1

    e9c01bdbfdcbb79e07d18385b6df2421e13deb35

  • SHA256

    9d77c41646171e427e4693f8a74fe1a91fecb40663719ba2133f1c1144536760

  • SHA512

    af46f0b96ee4f4fddb9888c6da4e06f7eb4c28cec92ccb1c87b933499063614fb1078ce314b17826c949c61f1b70cb2482db79a96adafb9bda7adf26d30179d4

  • SSDEEP

    768:QIgVA17rcsh1nVNhJLeh6plqhH1eh2bQMoB:TgG7rv7jhlekzqhHMIbQHB

Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 7 IoCs

Processes

  • C:\Windows\system32\regsvr32.exe
    regsvr32 /s C:\Users\Admin\AppData\Local\Temp\9d77c41646171e427e4693f8a74fe1a91fecb40663719ba2133f1c1144536760.dll
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1388
    • C:\Windows\SysWOW64\regsvr32.exe
      /s C:\Users\Admin\AppData\Local\Temp\9d77c41646171e427e4693f8a74fe1a91fecb40663719ba2133f1c1144536760.dll
      2⤵
        PID:1476

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • memory/1388-54-0x000007FEFC141000-0x000007FEFC143000-memory.dmp

            Filesize

            8KB

          • memory/1476-56-0x00000000768A1000-0x00000000768A3000-memory.dmp

            Filesize

            8KB