Analysis

  • max time kernel
    142s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    04/02/2024, 17:30

General

  • Target

    8fbde37b352302a42658caa260a7f9c6.dll

  • Size

    300KB

  • MD5

    8fbde37b352302a42658caa260a7f9c6

  • SHA1

    0afa716603ed23c4c63b74b2031901358cecdb44

  • SHA256

    0d3ad4a4444f114374720c4950178bacea223a73595b957814c776e73f214bc7

  • SHA512

    a5917aa82ac02a3a139737a807d186aa25c948c51c3a17a9e1e4fd4c648b02a2b8bceb04a0ac9050b7df3ba3e5c9ef71880b55d939e029f3f2eb616f28f94c2f

  • SSDEEP

    3072:EA6cbZ2i/VYDN4+6tY7N13zZ62hkRhK4KX/QFPEH2DjxWU897vVq9/wjK0tCByrr:rhVYDNgy7N9z0AkRxAmcyWU21jKDByr

Score
6/10

Malware Config

Signatures

  • Installs/modifies Browser Helper Object 2 TTPs 1 IoCs

    BHOs are DLL modules which act as plugins for Internet Explorer.

  • Modifies registry class 50 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Windows\system32\regsvr32.exe
    regsvr32 /s C:\Users\Admin\AppData\Local\Temp\8fbde37b352302a42658caa260a7f9c6.dll
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1968
    • C:\Windows\SysWOW64\regsvr32.exe
      /s C:\Users\Admin\AppData\Local\Temp\8fbde37b352302a42658caa260a7f9c6.dll
      2⤵
      • Installs/modifies Browser Helper Object
      • Modifies registry class
      PID:1864

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads