be63608b2dd6ef065d3db20b272d8128368b2baafe3db0943447ac3ba4071bc9

Resubmissions

22-02-2024 19:45

16-02-2024 04:40

max time kernel
142s
max time network
122s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
16-02-2024 04:40

Target

ffc39c3fdbe06c62d04f4853fd2f0dda2e745a2886776b2ee39418c53d764441.dll
Size

193KB
MD5

f5cea7d74d36624df4e136c6c74b30f0
SHA1

892f2bd2f7582a6a8a98bc5e8c3876f6ec7a5af0
SHA256

ffc39c3fdbe06c62d04f4853fd2f0dda2e745a2886776b2ee39418c53d764441
SHA512

b2f3be9f408057d10372f66ed81f69d75eb3ea8d4f321108e5faf7ad1ade3092f50d9c0719a410c744f60fa9481cad6285a581740cda48029389ca1d7ba4d460
SSDEEP

3072:fhVQkLSPB5/bhWll55++X1qxSKctXzFNI516skIprTf1vngLK/74:fhNLOBNcrPzqxfcrWrPkIpr/74

Score

1^/10

Suspicious use of WriteProcessMemory 7 IoCs

Processes:

regsvr32.exe

description	pid	process	target process
PID 2176 wrote to memory of 2116	2176	regsvr32.exe	regsvr32.exe
PID 2176 wrote to memory of 2116	2176	regsvr32.exe	regsvr32.exe
PID 2176 wrote to memory of 2116	2176	regsvr32.exe	regsvr32.exe
PID 2176 wrote to memory of 2116	2176	regsvr32.exe	regsvr32.exe
PID 2176 wrote to memory of 2116	2176	regsvr32.exe	regsvr32.exe
PID 2176 wrote to memory of 2116	2176	regsvr32.exe	regsvr32.exe
PID 2176 wrote to memory of 2116	2176	regsvr32.exe	regsvr32.exe

C:\Windows\system32\regsvr32.exe
regsvr32 /s C:\Users\Admin\AppData\Local\Temp\ffc39c3fdbe06c62d04f4853fd2f0dda2e745a2886776b2ee39418c53d764441.dll
1⤵
- Suspicious use of WriteProcessMemory
PID:2176

C:\Windows\SysWOW64\regsvr32.exe
/s C:\Users\Admin\AppData\Local\Temp\ffc39c3fdbe06c62d04f4853fd2f0dda2e745a2886776b2ee39418c53d764441.dll
2⤵
PID:2116

memory/2116-0-0x0000000074360000-0x0000000074394000-memory.dmp

Filesize
208KB

Download
memory/2116-1-0x0000000074360000-0x0000000074394000-memory.dmp

Filesize
208KB

Download
memory/2116-2-0x0000000074360000-0x0000000074394000-memory.dmp

Filesize
208KB

Download
memory/2116-3-0x0000000074360000-0x0000000074394000-memory.dmp

Filesize
208KB

Download
memory/2116-4-0x0000000074360000-0x0000000074394000-memory.dmp

Filesize
208KB

Download
memory/2116-5-0x0000000074360000-0x0000000074394000-memory.dmp

Filesize
208KB

Download
memory/2116-6-0x0000000074360000-0x0000000074394000-memory.dmp

Filesize
208KB

Download
memory/2116-7-0x0000000074360000-0x0000000074394000-memory.dmp

Filesize
208KB

Download
memory/2116-8-0x0000000074360000-0x0000000074394000-memory.dmp

Filesize
208KB

Download
memory/2116-9-0x0000000074360000-0x0000000074394000-memory.dmp

Filesize
208KB

Download
memory/2116-10-0x0000000074360000-0x0000000074394000-memory.dmp

Filesize
208KB

Download
memory/2116-11-0x0000000074360000-0x0000000074394000-memory.dmp

Filesize
208KB

Download
memory/2116-12-0x0000000074360000-0x0000000074394000-memory.dmp

Filesize
208KB

Download
memory/2116-13-0x0000000074360000-0x0000000074394000-memory.dmp

Filesize
208KB

Download