a03744f35b77f3f73126c069a17ab2f7f3816a9d84e70d55cbd299502d33c7cd | Triage

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
24/01/2024, 14:06

Sharing

Report Analysis Logs

General

Target

726ff86fcfc6f6ce4f43bef683fe5639.dll
Size

17KB
MD5

726ff86fcfc6f6ce4f43bef683fe5639
SHA1

76094730855d5c1bd4e997b627b17280e1520e29
SHA256

a03744f35b77f3f73126c069a17ab2f7f3816a9d84e70d55cbd299502d33c7cd
SHA512

1b446378b255d02d6212ac26378a97b2942444c16c09ead85d417b2549dbc15d6b4f898fcd2604b1ee1bad2ec3d5d2b09a65e8502c2001a274edd2ff20ddac2a
SSDEEP

384:UTz5kfFoe6NFBWKnriuBBQARQkqMuo0d40:UKSNFHnrFBBQARQkKnd40

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2924	2756	WerFault.exe	14

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 2760 wrote to memory of 2756	2760	rundll32.exe	14
PID 2760 wrote to memory of 2756	2760	rundll32.exe	14
PID 2760 wrote to memory of 2756	2760	rundll32.exe	14
PID 2760 wrote to memory of 2756	2760	rundll32.exe	14
PID 2760 wrote to memory of 2756	2760	rundll32.exe	14
PID 2760 wrote to memory of 2756	2760	rundll32.exe	14
PID 2760 wrote to memory of 2756	2760	rundll32.exe	14
PID 2756 wrote to memory of 2924	2756	rundll32.exe	19
PID 2756 wrote to memory of 2924	2756	rundll32.exe	19
PID 2756 wrote to memory of 2924	2756	rundll32.exe	19
PID 2756 wrote to memory of 2924	2756	rundll32.exe	19

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\726ff86fcfc6f6ce4f43bef683fe5639.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2756
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2756 -s 224
  2⤵
  - Program crash
  PID:2924

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\726ff86fcfc6f6ce4f43bef683fe5639.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2760

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads