Analysis
-
max time kernel
145s -
max time network
151s -
platform
windows11-21h2_x64 -
resource
win11-20240214-en -
resource tags
-
submitted
19/02/2024, 16:38
General
-
Target
malzero/tools/openssl/libcrypto-1_1.dll
-
Size
2.2MB
-
MD5
81fe785349c1a2dce0a66d291503fea9
-
SHA1
ccac6ca60283905b926d6d71702bcc7748623eec
-
SHA256
7d9fef300aa78c812e1849e89a6a25a5f2e235b597b54fe0d776a6c8ccdf688c
-
SHA512
6080d9010357a5bea7094207a72b1a99c25a81ad3e323e63e40c61059714b8036c37209b2bd6555d401028b73a3feee6f772e8a265b38b7d711835ba6bf79e91
-
SSDEEP
49152:Fp3rA+xv5r0bDpddDtv0K8EGzLH1CPwDv3uFV5ns:HTx0dD6K8Lb1CPwDv3uFV5ns
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\malzero\tools\openssl\libcrypto-1_1.dll,#11⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\malzero\tools\openssl\libcrypto-1_1.dll,#12⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4508 -s 5203⤵
- Program crash
-
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 352 -p 4508 -ip 45081⤵