Analysis
- max time kernel
159s - max time network
167s - platform
windows10-2004_x64 - resource
win10v2004-20240226-en - resource tags
- submitted
08/03/2024, 12:46
General
- Target bb4b8e9a2b19ef39483977fcd0f4dd73.dll
- Size 176KB
- Sample240308-pz1absfc64
- SHA256 163c88fdc1f8f91a6fab7a01ff0a96c070f1094a548bd62832d4665a6250e314
Malware Config
Signatures
- Program crash 1 IoCs
- Modifies registry class 3 IoCs
- Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Windows\system32\regsvr32.exeregsvr32 /s C:\Users\Admin\AppData\Local\Temp\bb4b8e9a2b19ef39483977fcd0f4dd73.dll1⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\regsvr32.exe/s C:\Users\Admin\AppData\Local\Temp\bb4b8e9a2b19ef39483977fcd0f4dd73.dll2⤵
- Modifies registry class
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1644 -s 7003⤵
- Program crash
-
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 1644 -ip 16441⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=1404 --field-trial-handle=3488,i,1267426273081718772,6254127258555406296,262144 --variations-seed-version /prefetch:81⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1644-0-0x0000000010000000-0x0000000010041000-memory.dmp
memory/1644-1-0x00000000029E0000-0x0000000002A10000-memory.dmp
memory/1644-2-0x00000000029B0000-0x00000000029B3000-memory.dmp
memory/1644-3-0x0000000002990000-0x0000000002991000-memory.dmp
memory/1644-4-0x00000000029C0000-0x00000000029C1000-memory.dmp
memory/1644-5-0x0000000000FA0000-0x0000000000FA1000-memory.dmp
memory/1644-7-0x0000000002B80000-0x0000000002B81000-memory.dmp
memory/1644-6-0x0000000000FB0000-0x0000000000FB1000-memory.dmp
memory/1644-8-0x0000000002B70000-0x0000000002B71000-memory.dmp
memory/1644-9-0x0000000002BA0000-0x0000000002BA1000-memory.dmp
memory/1644-20-0x0000000002C30000-0x0000000002C31000-memory.dmp
memory/1644-21-0x0000000002C60000-0x0000000002C61000-memory.dmp
memory/1644-19-0x0000000002C40000-0x0000000002C41000-memory.dmp
memory/1644-18-0x0000000002C10000-0x0000000002C11000-memory.dmp
memory/1644-17-0x0000000002C20000-0x0000000002C21000-memory.dmp
memory/1644-16-0x0000000002BF0000-0x0000000002BF1000-memory.dmp
memory/1644-15-0x0000000002C00000-0x0000000002C01000-memory.dmp
memory/1644-14-0x0000000002BD0000-0x0000000002BD1000-memory.dmp
memory/1644-13-0x0000000002BE0000-0x0000000002BE1000-memory.dmp
memory/1644-12-0x0000000002BB0000-0x0000000002BB1000-memory.dmp
memory/1644-11-0x0000000002BC0000-0x0000000002BC1000-memory.dmp
memory/1644-10-0x0000000002B90000-0x0000000002B91000-memory.dmp
memory/1644-22-0x0000000002C50000-0x0000000002C51000-memory.dmp
memory/1644-23-0x0000000002C80000-0x0000000002C81000-memory.dmp
memory/1644-24-0x0000000002C70000-0x0000000002C71000-memory.dmp
memory/1644-25-0x0000000002CA0000-0x0000000002CA1000-memory.dmp
memory/1644-26-0x0000000002C90000-0x0000000002C91000-memory.dmp
memory/1644-27-0x0000000002CC0000-0x0000000002CC1000-memory.dmp
memory/1644-28-0x0000000002CB0000-0x0000000002CB1000-memory.dmp
memory/1644-30-0x0000000002CD0000-0x0000000002CD1000-memory.dmp
memory/1644-29-0x0000000002CE0000-0x0000000002CE1000-memory.dmp
memory/1644-31-0x0000000002D00000-0x0000000002D01000-memory.dmp
memory/1644-33-0x0000000002D20000-0x0000000002D21000-memory.dmp
memory/1644-32-0x0000000002CF0000-0x0000000002CF1000-memory.dmp
memory/1644-34-0x0000000002D10000-0x0000000002D11000-memory.dmp
memory/1644-35-0x0000000002D40000-0x0000000002D41000-memory.dmp
memory/1644-36-0x0000000002D30000-0x0000000002D31000-memory.dmp
memory/1644-37-0x0000000002D60000-0x0000000002D61000-memory.dmp
memory/1644-38-0x0000000002D50000-0x0000000002D51000-memory.dmp
memory/1644-40-0x0000000002D70000-0x0000000002D71000-memory.dmp
memory/1644-39-0x0000000002D90000-0x0000000002D91000-memory.dmp
memory/1644-41-0x0000000002DB0000-0x0000000002DB1000-memory.dmp
memory/1644-43-0x0000000002DD0000-0x0000000002DD1000-memory.dmp
memory/1644-42-0x0000000002DA0000-0x0000000002DA1000-memory.dmp
memory/1644-47-0x0000000002E10000-0x0000000002E11000-memory.dmp
memory/1644-49-0x0000000002E30000-0x0000000002E31000-memory.dmp
memory/1644-48-0x0000000002E00000-0x0000000002E01000-memory.dmp
memory/1644-46-0x0000000002DE0000-0x0000000002DE1000-memory.dmp
memory/1644-50-0x0000000002E20000-0x0000000002E21000-memory.dmp
memory/1644-45-0x0000000002DF0000-0x0000000002DF1000-memory.dmp
memory/1644-44-0x0000000002DC0000-0x0000000002DC1000-memory.dmp
memory/1644-51-0x0000000002E50000-0x0000000002E51000-memory.dmp
memory/1644-52-0x0000000002E40000-0x0000000002E41000-memory.dmp
memory/1644-53-0x0000000002E70000-0x0000000002E71000-memory.dmp
memory/1644-55-0x0000000002E60000-0x0000000002E61000-memory.dmp
memory/1644-54-0x0000000010000000-0x0000000010041000-memory.dmp
memory/1644-56-0x00000000029E0000-0x0000000002A10000-memory.dmp
memory/1644-57-0x0000000002E90000-0x0000000002E91000-memory.dmp