Analysis
-
max time kernel
149s -
max time network
147s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
18/02/2024, 15:34
General
-
Target
KeeperRL.v2023.09.20/KeeperRL.v2023.09.20/libcurl-4.dll
-
Size
693KB
-
MD5
42775d0e5d996d8795f4aca904662e77
-
SHA1
4706ce3adcdf455073cd8d568b8892dbece1262a
-
SHA256
107e5696fe4e00266d4806a14d9a1ea70a61b9ef29ef4db9a6354fb9d8cee8ac
-
SHA512
14da6b95fe03eeee1cbdb5b920c2c60b2ad83f1a6090b2ab2d7229fd996748623ace5204ecdd757571d1ac68013bc09b7e28600837b790cfd0985982f80dc59a
-
SSDEEP
12288:ZPLaSZ+F+9l8/Xn3cFG4VQ+3mskzb3XeLgLMitxXkp9kh3XU5pYRF:ZPLaF+9l8/XMFG4PzkzrumMitx0DgU5y
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\KeeperRL.v2023.09.20\KeeperRL.v2023.09.20\libcurl-4.dll,#11⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 2304 -s 1002⤵
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
592KB
-
Filesize
508KB
-
Filesize
436KB
-
Filesize
1.6MB
-
Filesize
380KB
-
Filesize
112KB
-
Filesize
4.3MB
-
Filesize
5.0MB
-
Filesize
856KB
-
Filesize
168KB