Analysis
-
max time kernel
150s -
max time network
187s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
02-10-2022 18:03
Behavioral task
behavioral1
Sample
14e547bebaa738b8605ba4182c4379317d121e268f846c0ed3da171375e65fe4.dll
Resource
win7-20220812-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
14e547bebaa738b8605ba4182c4379317d121e268f846c0ed3da171375e65fe4.dll
Resource
win10v2004-20220812-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
14e547bebaa738b8605ba4182c4379317d121e268f846c0ed3da171375e65fe4.dll
-
Size
768KB
-
MD5
d1aa0f26f557addd45e0d9fa4afecf15
-
SHA1
f1603f1ddf52391b16ee9e73e68f5dd405ab06b0
-
SHA256
14e547bebaa738b8605ba4182c4379317d121e268f846c0ed3da171375e65fe4
-
SHA512
4bb0d259c9c24c8509c9e09901b2b53df383b08249d85bb8d982b52449ffe039f1c9adcea749ae3efea7e5d78feb866825beff074b079cbac57e2eb8d7b1562e
-
SSDEEP
12288:3PAFc91nFoMWTbpwaDTg993x/f5NAEXpNUqjAaZIABesp:3IYHRbDZNUhOIAh
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 2264 wrote to memory of 2184 2264 regsvr32.exe 81 PID 2264 wrote to memory of 2184 2264 regsvr32.exe 81 PID 2264 wrote to memory of 2184 2264 regsvr32.exe 81
Processes
-
C:\Windows\system32\regsvr32.exeregsvr32 /s C:\Users\Admin\AppData\Local\Temp\14e547bebaa738b8605ba4182c4379317d121e268f846c0ed3da171375e65fe4.dll1⤵
- Suspicious use of WriteProcessMemory
PID:2264 -
C:\Windows\SysWOW64\regsvr32.exe/s C:\Users\Admin\AppData\Local\Temp\14e547bebaa738b8605ba4182c4379317d121e268f846c0ed3da171375e65fe4.dll2⤵PID:2184
-