Analysis

  • max time kernel
    16s
  • max time network
    34s
  • platform
    windows7_x64
  • resource
    win7-20230220-en
  • resource tags

    arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
  • submitted
    10/03/2023, 18:27

General

  • Target

    Adobe Flash CS3/AdobeOwl.dll

  • Size

    861KB

  • MD5

    04b98d79a083103813f58ad99310c07d

  • SHA1

    930e758fccb05d478346d8619c6b65c2e153c672

  • SHA256

    83a4bdf60c2166bc84b619bcb3c91f2d09ea13d3094d2f4f906c8425f8d34665

  • SHA512

    ad5a24a90012fd7064404ca3363647288f173adcb7d340e02eb187b0f89361b763acafe7f66d905de21569d1c147836ff1a3f0814f05fce728dfeda2583c8a2a

  • SSDEEP

    12288:STSEvYCuerMiBounLDs+lcGX1WV/tnxV7VZre1z3U39HwNaPPAIw:YRMzOqGgV/1nVg3UtHwgPVw

Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 7 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe "C:\Users\Admin\AppData\Local\Temp\Adobe Flash CS3\AdobeOwl.dll",#1
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1452
    • C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe "C:\Users\Admin\AppData\Local\Temp\Adobe Flash CS3\AdobeOwl.dll",#1
      2⤵
        PID:1388

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads