48635f691c02d62bb1d344f7072553dbb5a22be588f822fe1a9f235628cce880 | Triage

Analysis

max time kernel
140s
max time network
119s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
30/12/2023, 14:18

Sharing

Report Analysis Logs

General

Target

1b32d47fdadda86bd2826ef333050185.dll
Size

72KB
MD5

1b32d47fdadda86bd2826ef333050185
SHA1

66639343e7bb86125d47f94487376a15569339cf
SHA256

48635f691c02d62bb1d344f7072553dbb5a22be588f822fe1a9f235628cce880
SHA512

9a28bc18389d253751e6440feaf8c2677371d0ebecb54e1554d6c1d6098339f9ed96263741d98aae16647704e4093c2ea9886a6174c0fe9288b42f804d689a1b
SSDEEP

1536:Y0wqHOAQBoANnWmSAYzIt3GdZlFvYK3c9w8l:hY3NnWqI7k

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process
2212	2180	WerFault.exe

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 2360 wrote to memory of 2180	2360	rundll32.exe	17
PID 2360 wrote to memory of 2180	2360	rundll32.exe	17
PID 2360 wrote to memory of 2180	2360	rundll32.exe	17
PID 2360 wrote to memory of 2180	2360	rundll32.exe	17
PID 2360 wrote to memory of 2180	2360	rundll32.exe	17
PID 2360 wrote to memory of 2180	2360	rundll32.exe	17
PID 2360 wrote to memory of 2180	2360	rundll32.exe	17
PID 2180 wrote to memory of 2212	2180	rundll32.exe	16
PID 2180 wrote to memory of 2212	2180	rundll32.exe	16
PID 2180 wrote to memory of 2212	2180	rundll32.exe	16
PID 2180 wrote to memory of 2212	2180	rundll32.exe	16

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1b32d47fdadda86bd2826ef333050185.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2360
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\1b32d47fdadda86bd2826ef333050185.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:2180

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2180 -s 340
1⤵
- Program crash
PID:2212

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2180-0-0x0000000000200000-0x000000000022B000-memory.dmp

Filesize
172KB

Download
memory/2180-1-0x0000000000200000-0x000000000022B000-memory.dmp

Filesize
172KB

Download