7473fccd310023810748d9e643445f2359a8a3286710bd8fef67dcd4abaabdf0 | Triage

Analysis

max time kernel
120s
max time network
124s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
12/01/2024, 06:16

Sharing

Report Analysis Logs

General

Target

55b4b0a090a4aad580a6215c27b95770.dll
Size

53KB
MD5

55b4b0a090a4aad580a6215c27b95770
SHA1

2dc8d2ff1a3a5a158957df47c0b2194c898f5e7e
SHA256

7473fccd310023810748d9e643445f2359a8a3286710bd8fef67dcd4abaabdf0
SHA512

d41673f4efc9555956cc7635309b098bfdc201acc2035554299fb1e1dcfc92d9c311f70b6d68a9e147aa1b9b78997b3379bf21b488055819855f221a9bbd5556
SSDEEP

1536:Jt3CC5YwGEejrf3Lzs0wVl0igbh4eRppt:JtSG+s0kqigbeeht

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 952 wrote to memory of 1372	952	regsvr32.exe	16
PID 952 wrote to memory of 1372	952	regsvr32.exe	16
PID 952 wrote to memory of 1372	952	regsvr32.exe	16
PID 952 wrote to memory of 1372	952	regsvr32.exe	16
PID 952 wrote to memory of 1372	952	regsvr32.exe	16
PID 952 wrote to memory of 1372	952	regsvr32.exe	16
PID 952 wrote to memory of 1372	952	regsvr32.exe	16

C:\Windows\SysWOW64\regsvr32.exe
/s C:\Users\Admin\AppData\Local\Temp\55b4b0a090a4aad580a6215c27b95770.dll
1⤵
PID:1372

C:\Windows\system32\regsvr32.exe
regsvr32 /s C:\Users\Admin\AppData\Local\Temp\55b4b0a090a4aad580a6215c27b95770.dll
1⤵
- Suspicious use of WriteProcessMemory
PID:952

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1372-0-0x0000000020000000-0x0000000020038000-memory.dmp

Filesize
224KB

Download