Analysis
-
max time kernel
39s -
max time network
54s -
platform
windows7_x64 -
resource
win7-20220901-es -
resource tags
-
submitted
28-12-2022 18:25
General
-
Target
publish/bin/libatk-1.0-0.dll
-
Size
136KB
-
MD5
ce9ab2defa6d7a584152a54108c30bfc
-
SHA1
8b221ad2c5c428c0b73b30f9fbebd1a99186c8f1
-
SHA256
2a80279b8dbeec1bb9b4121ccd4801034599184dab1c9166d5a29df1fd819df9
-
SHA512
10a9d8e4ad9d120260273f70c2a820c10429cff86ba770ffe1cb0f57097175e1367c52b7f7a97ac29e62b09f08a2799f3c43faf9df25dd44d39fed44b25ecd89
-
SSDEEP
1536:lQ/IMw1Tk3vQeJEMq8iMjIV9WBmF/9yjr7YrDn8KBBIxpRu63GQsU9jDQn7BmCoU:6ETWvrEMq8iMjIfKjArDnP0EzUxDGMvU
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\publish\bin\libatk-1.0-0.dll,#11⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 1116 -s 1842⤵
- Program crash
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1208-54-0x0000000000000000-mapping.dmp