0918405ab0ab2485937af6329e7e1a6992afd98489ccb21cfe77c761328b272f | Triage

Analysis

max time kernel
30s
max time network
35s
platform
windows7_x64
resource
win7-20230220-es
resource tags

arch:x64arch:x86image:win7-20230220-eslocale:es-esos:windows7-x64systemwindows
submitted
28/05/2023, 02:33

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

zlib.dll
Size

52KB
MD5

4965107d112666d3835308a831a29274
SHA1

50439b99ce525ecb74c554e1dc43ddb39481dfa4
SHA256

105280995cd5746078d67b8651dfe4ad2abcd532d7ad528d3100c535b0b538af
SHA512

38fa8f0eeadd75bf212eaab458833cfd3445d00f3d77f1f8a86b7c3ba99376231c8b3fc3cfdff6f02f2ca9c90956c76f9055717712d35a7ca7b30172a0010b59
SSDEEP

768:MX8TJyuiie4tVkIuCE8U8tOF5GqqQhGbY5ma78ct+Jn0r25mSSIjpe5uw+/Bz4o1:MXGJxIIuCE8U8tOF5pUB0wEo+X

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1620	536	WerFault.exe	28

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 948 wrote to memory of 536	948	rundll32.exe	28
PID 948 wrote to memory of 536	948	rundll32.exe	28
PID 948 wrote to memory of 536	948	rundll32.exe	28
PID 948 wrote to memory of 536	948	rundll32.exe	28
PID 948 wrote to memory of 536	948	rundll32.exe	28
PID 948 wrote to memory of 536	948	rundll32.exe	28
PID 948 wrote to memory of 536	948	rundll32.exe	28
PID 536 wrote to memory of 1620	536	rundll32.exe	29
PID 536 wrote to memory of 1620	536	rundll32.exe	29
PID 536 wrote to memory of 1620	536	rundll32.exe	29
PID 536 wrote to memory of 1620	536	rundll32.exe	29

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\zlib.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:948
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\zlib.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:536
- - C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -u -p 536 -s 228
    3⤵
    - Program crash
    PID:1620

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads