bc2632f724ba075b68805e5d1f02036db876df8739f2a6b80f2a27e3b8c66107

Analysis

max time kernel
39s
max time network
47s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
30/10/2022, 02:39

Target

bc2632f724ba075b68805e5d1f02036db876df8739f2a6b80f2a27e3b8c66107.dll
Size

184KB
MD5

5ac8e5347d36b07166fe1e00b5ec858f
SHA1

4dfb11a26d82925da6cca25e0f3047072babf2cb
SHA256

bc2632f724ba075b68805e5d1f02036db876df8739f2a6b80f2a27e3b8c66107
SHA512

33f17654195b41150171f84a1e13c463e8abfc07b045437866d1b0d7d075173306344d255d1c73c1ca9e689a62496ce1f04aeada01053c8a1070b0caa391d912
SSDEEP

3072:f5/u85KDlv1CQptYCTKss2kiS6/QOAV1nEfzXfv9KjI82mGMQD9fNlnFQ+vK/:f5Z2vc6Rs2kPtCTvaD2FTfNdC/

Score

1^/10

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 1032 wrote to memory of 1788	1032	regsvr32.exe	28
PID 1032 wrote to memory of 1788	1032	regsvr32.exe	28
PID 1032 wrote to memory of 1788	1032	regsvr32.exe	28
PID 1032 wrote to memory of 1788	1032	regsvr32.exe	28
PID 1032 wrote to memory of 1788	1032	regsvr32.exe	28
PID 1032 wrote to memory of 1788	1032	regsvr32.exe	28
PID 1032 wrote to memory of 1788	1032	regsvr32.exe	28

C:\Windows\system32\regsvr32.exe
regsvr32 /s C:\Users\Admin\AppData\Local\Temp\bc2632f724ba075b68805e5d1f02036db876df8739f2a6b80f2a27e3b8c66107.dll
1⤵
- Suspicious use of WriteProcessMemory
PID:1032
- C:\Windows\SysWOW64\regsvr32.exe
  /s C:\Users\Admin\AppData\Local\Temp\bc2632f724ba075b68805e5d1f02036db876df8739f2a6b80f2a27e3b8c66107.dll
  2⤵
  PID:1788

memory/1032-54-0x000007FEFC581000-0x000007FEFC583000-memory.dmp

Filesize
8KB

Download
memory/1788-56-0x0000000076711000-0x0000000076713000-memory.dmp

Filesize
8KB

Download