Analysis
-
max time kernel
122s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20230712-en -
resource tags
arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system -
submitted
21/08/2023, 12:28
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
4545.dll
Resource
win7-20230712-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
4545.dll
Resource
win10v2004-20230703-en
3 signatures
150 seconds
General
-
Target
4545.dll
-
Size
627KB
-
MD5
86efe486dedbca08d9ce8a0b4156b75b
-
SHA1
4f977cef5183e3d325cd8f9bb245b7de0f288256
-
SHA256
9b85fbfa3892a7a6deffba5d5bc5dd9c35ac6cb97a631752142faa0839423186
-
SHA512
56ba499f7e9dddccb029337048713171bc47f9055de68bb4a734a617fc12bf1870326ab97c3838e6c16e809d1c38326a57585469f40843e6ed54d92b5f1cca76
-
SSDEEP
12288:2TrZPDCk8aIcpSUM8IbLnFEeVJGAuG/g1ms5ULR:Ekk8av9IXFZoA9ghG
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3016 regsvr32.exe -
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 3016 wrote to memory of 2020 3016 regsvr32.exe 28 PID 3016 wrote to memory of 2020 3016 regsvr32.exe 28 PID 3016 wrote to memory of 2020 3016 regsvr32.exe 28