Resubmissions

22-09-2022 16:56

220922-vf11eafgan 10

22-09-2022 16:47

220922-va1gpaffgr 3

13-09-2022 17:49

220913-wd1gjacabk 3

Analysis

  • max time kernel
    42s
  • max time network
    45s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    22-09-2022 16:47

General

  • Target

    0c2a3456d8a82f95e615fbff0a35740e.dll

  • Size

    2.7MB

  • MD5

    0c2a3456d8a82f95e615fbff0a35740e

  • SHA1

    088236f029a63fe956fd1533f540d667c758d50f

  • SHA256

    dba0d741dd62e61776ec42115faf046cc9cb617411d60757a2c07fdd2beb6a6a

  • SHA512

    832b147a70f58fbd55aa869dcf612f2b109667d0a3f140e18cd0f6925ee5b4db00edfbbdf13b5e912c5b96d7127df991aba08b5a3f5770873fe17823bdea1728

  • SSDEEP

    49152:Jzl1rpbUrqvv0v2rQVt8nqwI7lOOYcf2ek:P1Kqvv07noI7lOOYcp

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs
  • Suspicious use of WriteProcessMemory 11 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\0c2a3456d8a82f95e615fbff0a35740e.dll,#1
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2024
    • C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\0c2a3456d8a82f95e615fbff0a35740e.dll,#1
      2⤵
      • Suspicious use of WriteProcessMemory
      PID:1956
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 1956 -s 196
        3⤵
        • Program crash
        PID:1284

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1956-55-0x0000000075F81000-0x0000000075F83000-memory.dmp

    Filesize

    8KB

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.