498f7995ede4b0b6d883ba8753cfdf8378970a15ee0edb19d7e4eff38f099d24 | Triage

Analysis

max time kernel
117s
max time network
120s
platform
windows7_x64
resource
win7-20230712-en
resource tags

arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
submitted
28/08/2023, 23:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

outfitfix.dll
Size

41KB
MD5

795df56453ab16ed321a3937efa33d82
SHA1

63b665373b787d420d7fe1047885fc19b5b5672b
SHA256

9afb7c9db7c1db7018e5ca1fa68971183ace8b4ffedf9354adc6a2e45a40c8a0
SHA512

4fec53a225d71008123d2f622c33e34611874b5dabc259494f0405fc2d027332d42842ab63de6f61fd4e4aec817544769ea07ce79c7d1c419bb623ac9d932396
SSDEEP

768:LTjUPAIaXORsQ90tipV5lNtbe9k1CoMR/jFd91:3QPWGT9j5fvsR/jH91

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2300	2168	WerFault.exe	28

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 2212 wrote to memory of 2168	2212	rundll32.exe	28
PID 2212 wrote to memory of 2168	2212	rundll32.exe	28
PID 2212 wrote to memory of 2168	2212	rundll32.exe	28
PID 2212 wrote to memory of 2168	2212	rundll32.exe	28
PID 2212 wrote to memory of 2168	2212	rundll32.exe	28
PID 2212 wrote to memory of 2168	2212	rundll32.exe	28
PID 2212 wrote to memory of 2168	2212	rundll32.exe	28
PID 2168 wrote to memory of 2300	2168	rundll32.exe	29
PID 2168 wrote to memory of 2300	2168	rundll32.exe	29
PID 2168 wrote to memory of 2300	2168	rundll32.exe	29
PID 2168 wrote to memory of 2300	2168	rundll32.exe	29

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\outfitfix.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2212
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\outfitfix.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:2168
- - C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -u -p 2168 -s 268
    3⤵
    - Program crash
    PID:2300

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads