Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    29/02/2024, 01:58

General

  • Target

    accon.dll

  • Size

    263KB

  • MD5

    540c27f32780b39d662e6c85ce01920c

  • SHA1

    d1e7776e8b81bba090c1f8b1cb345fa0e96a9e9f

  • SHA256

    a9d217fad095ece2ef5a742e6f41019b0728e6a8201339e8d1feab62641a555d

  • SHA512

    23778f447b24077c05ce75df749d5950890018175e7fdf40a1c51641f50a1f57e0024d034fa2c8676dee60de58616e444f2acf81228b7c1c6b2a5cfa42bfbf79

  • SSDEEP

    6144:V77buYanvMskYQqtapQ6me++KrYJx6t715EGrMw3d7+WF/luBQ:V/buYqNk9VReMx6x155dqyb

Score
1/10

Malware Config

Signatures

  • Modifies registry class 64 IoCs
  • Suspicious use of WriteProcessMemory 7 IoCs

Processes

  • C:\Windows\system32\regsvr32.exe
    regsvr32 /s C:\Users\Admin\AppData\Local\Temp\accon.dll
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2932
    • C:\Windows\SysWOW64\regsvr32.exe
      /s C:\Users\Admin\AppData\Local\Temp\accon.dll
      2⤵
      • Modifies registry class
      PID:2368

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/2368-0-0x0000000000410000-0x00000000004B5000-memory.dmp

          Filesize

          660KB

        • memory/2368-1-0x0000000000410000-0x00000000004B5000-memory.dmp

          Filesize

          660KB

        • memory/2368-2-0x00000000000C0000-0x00000000000C2000-memory.dmp

          Filesize

          8KB

        • memory/2368-3-0x00000000000C0000-0x00000000000C2000-memory.dmp

          Filesize

          8KB