Analysis

  • max time kernel
    148s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29/02/2024, 01:58

General

  • Target

    accon.dll

  • Size

    263KB

  • MD5

    540c27f32780b39d662e6c85ce01920c

  • SHA1

    d1e7776e8b81bba090c1f8b1cb345fa0e96a9e9f

  • SHA256

    a9d217fad095ece2ef5a742e6f41019b0728e6a8201339e8d1feab62641a555d

  • SHA512

    23778f447b24077c05ce75df749d5950890018175e7fdf40a1c51641f50a1f57e0024d034fa2c8676dee60de58616e444f2acf81228b7c1c6b2a5cfa42bfbf79

  • SSDEEP

    6144:V77buYanvMskYQqtapQ6me++KrYJx6t715EGrMw3d7+WF/luBQ:V/buYqNk9VReMx6x155dqyb

Score
1/10

Malware Config

Signatures

  • Modifies registry class 64 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Windows\system32\regsvr32.exe
    regsvr32 /s C:\Users\Admin\AppData\Local\Temp\accon.dll
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:4164
    • C:\Windows\SysWOW64\regsvr32.exe
      /s C:\Users\Admin\AppData\Local\Temp\accon.dll
      2⤵
      • Modifies registry class
      PID:2340

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/2340-0-0x0000000000400000-0x00000000004A5000-memory.dmp

          Filesize

          660KB

        • memory/2340-1-0x00000000009E0000-0x00000000009E2000-memory.dmp

          Filesize

          8KB