Analysis

  • max time kernel
    28s
  • max time network
    34s
  • platform
    windows7_x64
  • resource
    win7-20230705-en
  • resource tags

    arch:x64arch:x86image:win7-20230705-enlocale:en-usos:windows7-x64system
  • submitted
    06/07/2023, 10:44

General

  • Target

    LiveChartsRegion.dll

  • Size

    59KB

  • MD5

    0d4672955cddebc60cdc5cb0510294d8

  • SHA1

    8cad08e2fb925656bf7f70f954874f661d2fe32e

  • SHA256

    e0553e5afac83e74fee2d5a69d25ecba12da126fba9e00b8757f769dbdcdb0cc

  • SHA512

    45741d5468e745ed2bbe8b0583243d7a2b5e6a0cafeb23dd6c19831700c93db546ab18ec8c46f58df29ddf805352cd72bc7bc3837759cafe8304ad431b723db7

  • SSDEEP

    1536:TJeUvbSllXaYYeODO3ujE49i+tgX1xPzq3ePM1c6O:rzilXzYeOC+/9HglxPzfPD6O

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\LiveChartsRegion.dll,#1
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2892
    • C:\Windows\system32\WerFault.exe
      C:\Windows\system32\WerFault.exe -u -p 2892 -s 544
      2⤵
      • Program crash
      PID:3040

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/2892-54-0x0000000001F60000-0x0000000001FE0000-memory.dmp

          Filesize

          512KB

        • memory/2892-55-0x00000000020F0000-0x0000000002108000-memory.dmp

          Filesize

          96KB

        • memory/2892-56-0x0000000001F60000-0x0000000001FE0000-memory.dmp

          Filesize

          512KB