Analysis
-
max time kernel
138s -
max time network
145s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
25-01-2024 16:52
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
750447566ce9abe554e882134c8f5a71.dll
Resource
win7-20231215-en
windows7-x64
1 signatures
150 seconds
General
-
Target
750447566ce9abe554e882134c8f5a71.dll
-
Size
91KB
-
MD5
750447566ce9abe554e882134c8f5a71
-
SHA1
651a9fc21af3aae3c560f30b32b3e77806ee89c2
-
SHA256
544ea09f179341144cf3f611c63ebf5cd3b53b8b18cb7cb9e4d5baef2b6ccd70
-
SHA512
1d3030f44afa13ee617baa728d89461854566a1517a41e5f9ee155cf6f9dab7b9e7da264dd651943455be7c734abea44b7b38539d1826195f65d8ac66f6ea167
-
SSDEEP
768:qeP9h1smPdDsDdkWEw5fwxxJoeP9h1smPdDsDdkWEw5fwxxJoeP9h1smPdDsDdkh:qkfLWIXokfLWIXokfLWIX
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes:
regsvr32.exedescription pid process target process PID 2388 wrote to memory of 4604 2388 regsvr32.exe regsvr32.exe PID 2388 wrote to memory of 4604 2388 regsvr32.exe regsvr32.exe PID 2388 wrote to memory of 4604 2388 regsvr32.exe regsvr32.exe