Analysis
-
max time kernel
115s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
17/02/2024, 18:14
General
-
Target
libass-9.dll
-
Size
314KB
-
MD5
91be1e7a9a1c1f0e4ff4c497a05d1891
-
SHA1
5ed0f186f6756703f4102d743d7b4ec60e5dbe2a
-
SHA256
88cfbbb4805ea9a88ee36c2797808b763938f540a73816980109b776b7e2536a
-
SHA512
6e4393dd075f25e2a83acd531e1171089080cbe3de2492d1286b151c4cfaf10c0be5f2dc7914e6c45829123aacb632321a23ebf74ba32053827e1cf62716fc49
-
SSDEEP
6144:Iv7PP65GJvXwhgljekl6kst7IXm3VbGXus3tcMbG51PW5iSIq:4gEjplS7gm3VbG5y1WKq
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\libass-9.dll,#11⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\libass-9.dll,#12⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4800 -s 6563⤵
- Program crash
-
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4800 -ip 48001⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.4MB
-
Filesize
328KB
-
Filesize
152KB
-
Filesize
796KB
-
Filesize
176KB
-
Filesize
1.1MB
-
Filesize
352KB
-
Filesize
1.0MB
-
Filesize
88KB
-
Filesize
276KB
-
Filesize
132KB
-
Filesize
96KB
-
Filesize
184KB
-
Filesize
152KB
-
Filesize
232KB
-
Filesize
172KB
-
Filesize
172KB
-
Filesize
1.8MB
-
Filesize
304KB