Overview

overview

3

Static

static

421b71ac92...12.dll

windows7-x64

3

421b71ac92...12.dll

windows10-2004-x64

1

Resubmissions

10-11-2022 09:03

221110-kz8t9agea6 10

17-10-2022 17:51

221017-wfjxkacee7 3

Analysis

  • max time kernel
    38s
  • max time network
    40s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    17-10-2022 17:51

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    421b71ac924938e9b47291f38233d9e4b8116c1f4ec8db523d229535c8c12212.dll

  • Size

    665KB

  • MD5

    01f0836fe176750d2163e36177e581b4

  • SHA1

    c6cb7ec82ee55ccb56a4cc8b91c64e9b4f4e14da

  • SHA256

    421b71ac924938e9b47291f38233d9e4b8116c1f4ec8db523d229535c8c12212

  • SHA512

    81aa866692c6220db40ed95b4efaf7613f10d932913120995156c4bca36d0ba32055826a7289fec0eb0e5c40fb22ee56a0fb3fc32d56f649610d8828450a6497

  • SSDEEP

    12288:1qeDSdwfsttoz8nW2+VQz8WOoOPYgq7iUVs3lVXG8Lp:1qISIsttoqW2+VQzHO9YDjS1VXNp

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Windows\system32\regsvr32.exe
    regsvr32 /s C:\Users\Admin\AppData\Local\Temp\421b71ac924938e9b47291f38233d9e4b8116c1f4ec8db523d229535c8c12212.dll
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:1300
    • C:\Windows\system32\WerFault.exe
      C:\Windows\system32\WerFault.exe -u -p 1300 -s 216
      2⤵
      • Program crash
      PID:1560

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1300-54-0x000007FEFBAE1000-0x000007FEFBAE3000-memory.dmp

    Filesize

    8KB

    Download