1932d6d22dfc87f0894437a153ee5f6486f8cf737a340b278ffc01046a29c603 | Triage

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
19/01/2024, 19:05

Sharing

Report Analysis Logs

General

Target

libjcc.dll
Size

230KB
MD5

ca4274f071ed73d6dee9812490cb62cf
SHA1

e168bbf40ab267b3408f0c6cdc3a862307679b2e
SHA256

d2857a81c620a653d76270899ac5395cc9d47b6e19c796fe6a55366ed4570e35
SHA512

267d96ba2367dd782da118289acdf9bedb53fac5dc12e937e775d64babaa962db9aa70a2d4dc3a7361ae0473eb73e1b94b4545ec9965b106a221ecff4d60c312
SSDEEP

3072:CDxJ+Rv8u0bCDCP0/JMWZPEAR1E68FX17yqN8LKioQzwRkpyHLyxP:+H48u0bCuc/nEAR1QXfGpTxP

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2824	2864	WerFault.exe	28

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 2816 wrote to memory of 2864	2816	rundll32.exe	28
PID 2816 wrote to memory of 2864	2816	rundll32.exe	28
PID 2816 wrote to memory of 2864	2816	rundll32.exe	28
PID 2816 wrote to memory of 2864	2816	rundll32.exe	28
PID 2816 wrote to memory of 2864	2816	rundll32.exe	28
PID 2816 wrote to memory of 2864	2816	rundll32.exe	28
PID 2816 wrote to memory of 2864	2816	rundll32.exe	28
PID 2864 wrote to memory of 2824	2864	rundll32.exe	29
PID 2864 wrote to memory of 2824	2864	rundll32.exe	29
PID 2864 wrote to memory of 2824	2864	rundll32.exe	29
PID 2864 wrote to memory of 2824	2864	rundll32.exe	29

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\libjcc.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2816
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\libjcc.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:2864
- - C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -u -p 2864 -s 224
    3⤵
    - Program crash
    PID:2824

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads