Analysis

  • max time kernel
    133s
  • max time network
    149s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230621-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230621-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02-07-2023 19:20

General

  • Target

    Malicious_91c9164bfd8c713f4c8fba7e88f8d0aca0b51f717cc7c4691c868f5783088045.dll

  • Size

    92KB

  • MD5

    f5fb96b6c7470634944e03a4b59199f4

  • SHA1

    4860413541639d4ffaab1e533d64ccef62184484

  • SHA256

    91c9164bfd8c713f4c8fba7e88f8d0aca0b51f717cc7c4691c868f5783088045

  • SHA512

    62bf54b134997016d25f6ffc765b197e84fe7eb8a331ec41076223678b74bae21bfd6835e48b51b5c9599a6288ed66a9b4b22a1ce2bd0a8463fe5523fa47fb03

  • SSDEEP

    1536:DONx3L4A01nkldK+gXavCg57J/up+ptdC90:DOX4nnAthd5w+pto

Score
1/10

Malware Config

Signatures

  • Modifies registry class 64 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Windows\system32\regsvr32.exe
    regsvr32 /s C:\Users\Admin\AppData\Local\Temp\Malicious_91c9164bfd8c713f4c8fba7e88f8d0aca0b51f717cc7c4691c868f5783088045.dll
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:4396
    • C:\Windows\SysWOW64\regsvr32.exe
      /s C:\Users\Admin\AppData\Local\Temp\Malicious_91c9164bfd8c713f4c8fba7e88f8d0aca0b51f717cc7c4691c868f5783088045.dll
      2⤵
      • Modifies registry class
      PID:4180

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads