Analysis
-
max time kernel
148s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
25-11-2022 19:38
Behavioral task
behavioral1
Sample
ѻ︨v1.0/dm.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ѻ︨v1.0/dm.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
ѻ︨v1.0/ѻ︨v1.0.exe
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
ѻ︨v1.0/ѻ︨v1.0.exe
Resource
win10v2004-20220812-en
General
-
Target
ѻ︨v1.0/dm.dll
-
Size
804KB
-
MD5
c578b6820bda5689940560147c6e5ffc
-
SHA1
922e50d89c9c44bdc205ef17aa57212b64e58852
-
SHA256
3b6ddc32b800a18b21a819e842cbfdd57cb065fd92cc69545e0ef29b97cfd389
-
SHA512
9f2a1bb5788ad245242d12968bbf198af2694a87c6e2342f14672e8c14e8489dd3319434592fc9b20f620557d0fa58482903d19c7f5ba32456a1e4076dc1bb85
-
SSDEEP
24576:3rhlxaCsVb6KoTpZCFg6DTk1F2RjkjCQG:VWCsVb6KUpZ+hDg1F2d6
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes:
regsvr32.exedescription pid process target process PID 5108 wrote to memory of 1628 5108 regsvr32.exe regsvr32.exe PID 5108 wrote to memory of 1628 5108 regsvr32.exe regsvr32.exe PID 5108 wrote to memory of 1628 5108 regsvr32.exe regsvr32.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1628-132-0x0000000000000000-mapping.dmp