Analysis

  • max time kernel
    5s
  • max time network
    36s
  • platform
    windows7_x64
  • resource
    win7-20231023-en
  • resource tags

    arch:x64arch:x86image:win7-20231023-enlocale:en-usos:windows7-x64system
  • submitted
    07/11/2023, 14:31

General

  • Target

    sox-14.4.2/libvorbisfile-3.dll

  • Size

    37KB

  • MD5

    8addbf28b6aae0853df3638b1079a6b9

  • SHA1

    563fa0404251fdbadaac06085866c62813d384ad

  • SHA256

    1a14d8b0749f66811dacb23b093d54d4ff88036d49fd017b0d98b21de7f9ef1d

  • SHA512

    de5434497a226543f294485b4c8a011ebbaa5c4d1a2aa6e5aca330e40540de63866072b7c8c3de7dca5c55b204fe30210cbed758c3ab6bcb76fc8bdfc70c0f83

  • SSDEEP

    768:d5xfETL26sT6/tFCUKvsG6Fo/wmAY1yxKnk:d5xc3++/tFVrdwk

Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 7 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\sox-14.4.2\libvorbisfile-3.dll,#1
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2704
    • C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\sox-14.4.2\libvorbisfile-3.dll,#1
      2⤵
        PID:2708

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads