Analysis
-
max time kernel
119s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
31-12-2023 02:16
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
243182adcf9191d25a77b8bf6cc7d0b5.dll
Resource
win7-20231215-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
243182adcf9191d25a77b8bf6cc7d0b5.dll
Resource
win10v2004-20231215-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
243182adcf9191d25a77b8bf6cc7d0b5.dll
-
Size
29KB
-
MD5
243182adcf9191d25a77b8bf6cc7d0b5
-
SHA1
9ce8af5a2eedc4001a8933abf98636d138dfccb5
-
SHA256
fb23138d09b5b7f3bb0c6c0c4566c1ac0cfaa20554c23ae7f7870ee7cf8bfc1d
-
SHA512
39b34c080d4adbe4c732f7cf2d6d7c3907293e246ff0b641827bab983426e5d95a47b268fb70b1c44d7cae4ac04e77172bba1606f110d4824146564eeaf2ac9b
-
SSDEEP
384:rZUkgpRQpcEL/u0RpFO1/72Nh1AJfAJc+xehxLcTb5sIf6onBCYq7trvqazmeWXp:N+fi7pFO1/ZWcu5sqnBCprvq1XeQJRN
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 7 IoCs
Processes:
regsvr32.exedescription pid process target process PID 1320 wrote to memory of 860 1320 regsvr32.exe regsvr32.exe PID 1320 wrote to memory of 860 1320 regsvr32.exe regsvr32.exe PID 1320 wrote to memory of 860 1320 regsvr32.exe regsvr32.exe PID 1320 wrote to memory of 860 1320 regsvr32.exe regsvr32.exe PID 1320 wrote to memory of 860 1320 regsvr32.exe regsvr32.exe PID 1320 wrote to memory of 860 1320 regsvr32.exe regsvr32.exe PID 1320 wrote to memory of 860 1320 regsvr32.exe regsvr32.exe