8fe96a98404a44e6477d431a4a42cd8bf3c599ea77521a8a43483b3c1f75fadd

Analysis

max time kernel
36s
max time network
47s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
31/10/2022, 01:17

Target

8fe96a98404a44e6477d431a4a42cd8bf3c599ea77521a8a43483b3c1f75fadd.dll
Size

35KB
MD5

9153386762624c0274b45b7a111248c0
SHA1

21d78e2335124bbed5e87e57be635e5add13ebfc
SHA256

8fe96a98404a44e6477d431a4a42cd8bf3c599ea77521a8a43483b3c1f75fadd
SHA512

bbb4283458c5a5d7eb116f6985f5bcc79b0eebd1a654e011a6d13f35c0ef3bd4d41946bdf9f790d4e86cec77259219b86c04d8a63b080fbebacb27754b4e5991
SSDEEP

768:9mhCjjxFtqZLus2AgYRDCbFFJ6I7NNJNdwQ:Z9C6s2rYRDyJ6I7Nr

Score

4^/10

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\	regsvr32.exe

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 992 wrote to memory of 1164	992	regsvr32.exe	28
PID 992 wrote to memory of 1164	992	regsvr32.exe	28
PID 992 wrote to memory of 1164	992	regsvr32.exe	28
PID 992 wrote to memory of 1164	992	regsvr32.exe	28
PID 992 wrote to memory of 1164	992	regsvr32.exe	28
PID 992 wrote to memory of 1164	992	regsvr32.exe	28
PID 992 wrote to memory of 1164	992	regsvr32.exe	28

C:\Windows\system32\regsvr32.exe
regsvr32 /s C:\Users\Admin\AppData\Local\Temp\8fe96a98404a44e6477d431a4a42cd8bf3c599ea77521a8a43483b3c1f75fadd.dll
1⤵
- Suspicious use of WriteProcessMemory
PID:992
- C:\Windows\SysWOW64\regsvr32.exe
  /s C:\Users\Admin\AppData\Local\Temp\8fe96a98404a44e6477d431a4a42cd8bf3c599ea77521a8a43483b3c1f75fadd.dll
  2⤵
  - Drops file in Windows directory
  PID:1164

memory/992-54-0x000007FEFB741000-0x000007FEFB743000-memory.dmp

Filesize
8KB

Download
memory/1164-56-0x0000000075DA1000-0x0000000075DA3000-memory.dmp

Filesize
8KB

Download
memory/1164-57-0x0000000000140000-0x0000000000147000-memory.dmp

Filesize
28KB

Download
memory/1164-58-0x0000000000140000-0x0000000000147000-memory.dmp

Filesize
28KB

Download