32c878f919475073aa3a88384991dfb6ddea5537ed39e138af733455f8a448e9

Analysis

max time kernel
118s
max time network
131s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
05/01/2024, 11:14

Target

43899b74aad2f97d6d787231dbd663e3.dll
Size

52KB
MD5

43899b74aad2f97d6d787231dbd663e3
SHA1

0328f61607410385560c86a1e2c1bd2c9fb2e085
SHA256

32c878f919475073aa3a88384991dfb6ddea5537ed39e138af733455f8a448e9
SHA512

4b37d4b2faf66c5bf921252986dcdbc7b1806b8568533e621b5215bf9c7638eb18e597cd92395937529f0553727e8730f4c6ff498a38ce7f785a1eb680d29a4e
SSDEEP

768:WbGf9ZQBeosU4wt+K8ZW8pfwj01uQn4su+mcioTZn9LVKIFKmK3NOjWc+p:8GooR1V7rn1iodn9LccMIWc+p

Score

1^/10

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 2184 wrote to memory of 2232	2184	regsvr32.exe	28
PID 2184 wrote to memory of 2232	2184	regsvr32.exe	28
PID 2184 wrote to memory of 2232	2184	regsvr32.exe	28
PID 2184 wrote to memory of 2232	2184	regsvr32.exe	28
PID 2184 wrote to memory of 2232	2184	regsvr32.exe	28
PID 2184 wrote to memory of 2232	2184	regsvr32.exe	28
PID 2184 wrote to memory of 2232	2184	regsvr32.exe	28

C:\Windows\system32\regsvr32.exe
regsvr32 /s C:\Users\Admin\AppData\Local\Temp\43899b74aad2f97d6d787231dbd663e3.dll
1⤵
- Suspicious use of WriteProcessMemory
PID:2184
- C:\Windows\SysWOW64\regsvr32.exe
  /s C:\Users\Admin\AppData\Local\Temp\43899b74aad2f97d6d787231dbd663e3.dll
  2⤵
  PID:2232