22568ee12cd593f089177814385cbad0d197c90588e10477f5a591396218ad3a | Triage

Analysis

max time kernel
142s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
29/01/2024, 11:06

Sharing

Report Analysis Logs

General

Target

7faf5d996395a428c4f6f0c710c2052c.dll
Size

26KB
MD5

7faf5d996395a428c4f6f0c710c2052c
SHA1

f5542d62879a57ebd70da324dff546504c95dda2
SHA256

22568ee12cd593f089177814385cbad0d197c90588e10477f5a591396218ad3a
SHA512

ec70a5b38b65876705de65b2a40b9fddbd626c8481048f75adf27617c7999ae641151e10025a24642cff778c5b74cea70e18fe1bf27cab881e5af4b2f2854c96
SSDEEP

768:55Ci5qdSnQy0aYtDgLMYYRJuFQsPFzmM6nM:5gaqYnQfvtDggY7VPFzmM6nM

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2204 wrote to memory of 4980	2204	regsvr32.exe	16
PID 2204 wrote to memory of 4980	2204	regsvr32.exe	16
PID 2204 wrote to memory of 4980	2204	regsvr32.exe	16

C:\Windows\system32\regsvr32.exe
regsvr32 /s C:\Users\Admin\AppData\Local\Temp\7faf5d996395a428c4f6f0c710c2052c.dll
1⤵
- Suspicious use of WriteProcessMemory
PID:2204
- C:\Windows\SysWOW64\regsvr32.exe
  /s C:\Users\Admin\AppData\Local\Temp\7faf5d996395a428c4f6f0c710c2052c.dll
  2⤵
  PID:4980

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads