bc971dece4a97b427f59d51c90b25b6d591e179662b49c3ec5d4948ba893d7d4

Analysis

max time kernel
121s
max time network
124s
platform
windows7_x64
resource
win7-20231020-en
resource tags

arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system
submitted
26/11/2023, 02:03

Target

bc971dece4a97b427f59d51c90b25b6d591e179662b49c3ec5d4948ba893d7d4.dll
Size

176KB
MD5

03f8cdcb81e7b0c91a415d60d169bc4a
SHA1

41764f96a265a5dd49e85ad5ce33eff7e7e68a87
SHA256

bc971dece4a97b427f59d51c90b25b6d591e179662b49c3ec5d4948ba893d7d4
SHA512

3760fa4483263686dd5c05e47c32602f0a1fb09f3052fe62057a625772aafe870496422f09db0b2e8d4a0f8f20c86f2ef76f31ba2e5f2956667dd397479817dc
SSDEEP

1536:RiEcSu1aapcMf0I9mH+kKY0hy4F+JLKcq0hygV8nIIt8odcYHTqA1kCVjxw:SYJLKD0Ghp1nxw

Score

1^/10

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 2404 wrote to memory of 852	2404	regsvr32.exe	28
PID 2404 wrote to memory of 852	2404	regsvr32.exe	28
PID 2404 wrote to memory of 852	2404	regsvr32.exe	28
PID 2404 wrote to memory of 852	2404	regsvr32.exe	28
PID 2404 wrote to memory of 852	2404	regsvr32.exe	28
PID 2404 wrote to memory of 852	2404	regsvr32.exe	28
PID 2404 wrote to memory of 852	2404	regsvr32.exe	28

C:\Windows\system32\regsvr32.exe
regsvr32 /s C:\Users\Admin\AppData\Local\Temp\bc971dece4a97b427f59d51c90b25b6d591e179662b49c3ec5d4948ba893d7d4.dll
1⤵
- Suspicious use of WriteProcessMemory
PID:2404
- C:\Windows\SysWOW64\regsvr32.exe
  /s C:\Users\Admin\AppData\Local\Temp\bc971dece4a97b427f59d51c90b25b6d591e179662b49c3ec5d4948ba893d7d4.dll
  2⤵
  PID:852