7f4af8bf6568d684df93719bb2c64588ac3117885f07bdb7c46ce1d981a71013 | Triage

Analysis

max time kernel
160s
max time network
167s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
08/03/2024, 01:14

Sharing

Report Analysis Logs

General

Target

MSRD2X35.dll
Size

246KB
MD5

954ceb4d7c7dc5e94ea237cf96d387a3
SHA1

6dfba7f606d75782bff9694c3b098ffb6d6da1ac
SHA256

66c74e4c9dbd1d33b22f63cd0318b72dea88f9dbb4d36a3383d3da20b037d42e
SHA512

f1d2913fb16c6f78bcc8e75ae17e08bf6d7b13cee0a1deab07372f97fce8d1a8347bb1bd289bbfc874eeb156eb9a4af10d4ca5aeb83a5057bd1caf765be93b58
SSDEEP

6144:ZI0uKc+/y/n20qecWHUe+4nwO6WP2wpU:Ti2BenHUTzXWOwy

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 660 wrote to memory of 2592	660	regsvr32.exe	90
PID 660 wrote to memory of 2592	660	regsvr32.exe	90
PID 660 wrote to memory of 2592	660	regsvr32.exe	90

C:\Windows\system32\regsvr32.exe
regsvr32 /s C:\Users\Admin\AppData\Local\Temp\MSRD2X35.dll
1⤵
- Suspicious use of WriteProcessMemory
PID:660
- C:\Windows\SysWOW64\regsvr32.exe
  /s C:\Users\Admin\AppData\Local\Temp\MSRD2X35.dll
  2⤵
  PID:2592

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads