6dee2344f26d96eb6c4b37497aba549df51851169442a63c6e1292df95a7a67e

Analysis

max time kernel
122s
max time network
123s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
31/12/2023, 13:27

Target

37fba24694d9f2181cd5aa8f8484c051.dll
Size

83KB
MD5

37fba24694d9f2181cd5aa8f8484c051
SHA1

fca95acbddc8bafdd735070d4cd3eb774f019535
SHA256

6dee2344f26d96eb6c4b37497aba549df51851169442a63c6e1292df95a7a67e
SHA512

3e416a4362a0fcedb953e9b36b6a0bb908e51fae70ae4aa19a28339b6dc08fef1de8d659d032722aa46229b72d4b24dcfa03852d347dd6982065226dbde19985
SSDEEP

1536:r0V9DHD2pRzqX1yvQP9AepRPF0h8k79Pl5E0HW6rS0nE+Gwbf6:gVp6juF/iepRPFidkQtEW6

Score

1^/10

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 2184 wrote to memory of 1864	2184	regsvr32.exe	28
PID 2184 wrote to memory of 1864	2184	regsvr32.exe	28
PID 2184 wrote to memory of 1864	2184	regsvr32.exe	28
PID 2184 wrote to memory of 1864	2184	regsvr32.exe	28
PID 2184 wrote to memory of 1864	2184	regsvr32.exe	28
PID 2184 wrote to memory of 1864	2184	regsvr32.exe	28
PID 2184 wrote to memory of 1864	2184	regsvr32.exe	28

C:\Windows\system32\regsvr32.exe
regsvr32 /s C:\Users\Admin\AppData\Local\Temp\37fba24694d9f2181cd5aa8f8484c051.dll
1⤵
- Suspicious use of WriteProcessMemory
PID:2184
- C:\Windows\SysWOW64\regsvr32.exe
  /s C:\Users\Admin\AppData\Local\Temp\37fba24694d9f2181cd5aa8f8484c051.dll
  2⤵
  PID:1864

memory/1864-0-0x0000000000190000-0x00000000001CE000-memory.dmp

Filesize
248KB

Download