b0c31ad7678239cd78efc8395a8c4c78a502fa410a505eddd8872f6a9930f63a | Triage

Analysis

max time kernel
121s
max time network
144s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
26-12-2023 02:46

Sharing

Report Analysis Logs

General

Target

cef_frame.dll
Size

142KB
MD5

4c58a377c699280036143b224b0e07ee
SHA1

90769327ee0815f35971bec7f54d91ba22e5b612
SHA256

5aa3a836d463df8362cefa5334277120e67f77801a7dc025d6bba1e16b393ec2
SHA512

c699f9707f64f09c3a2fa908e042922865bad59bd88c8e5a058b90ad88f08797727c5ce6768b13915dffcb4239ba6257d6f30589213b0430bebcd04a4a0b2e57
SSDEEP

3072:IUOJCf3g4YbqOTW+P7LLwjGRsSa6CSQlPznaDKIfhgOa6Urxz2T:IjU4XTWowjGGShQlPeKI5n8x2T

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2248 wrote to memory of 3052	2248	rundll32.exe	28
PID 2248 wrote to memory of 3052	2248	rundll32.exe	28
PID 2248 wrote to memory of 3052	2248	rundll32.exe	28

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\cef_frame.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2248
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2248 -s 192
  2⤵
  PID:3052

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads