Analysis

  • max time kernel
    118s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    11/03/2024, 20:56

General

  • Target

    $PLUGINSDIR/nsisdl.dll

  • Size

    15KB

  • MD5

    75fdbfddcb769095e6143eb46cc77e26

  • SHA1

    a1fed5cedbc3c3319e332ae3f5347319af1f3f18

  • SHA256

    e2267f1a80ca42fde50e6b22f39821334a9ea622995e0869d3709b05306b1126

  • SHA512

    3ff5485f7a3c35e55b94bd09019555945ab4fd9fe03cce1ea9c43bd2fd75b0a9502342eb36acefe16a3ebcd9efc1c1eeea2b9621d31baa27b035ce60ffa1f3d8

  • SSDEEP

    384:bpy18oahashajPmIYInUJggBOZgAHhUKijb:bpy18oafmeggBOCAHpij

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs
  • Suspicious use of WriteProcessMemory 11 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\nsisdl.dll,#1
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2008
    • C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\nsisdl.dll,#1
      2⤵
      • Suspicious use of WriteProcessMemory
      PID:2772
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 2772 -s 220
        3⤵
        • Program crash
        PID:2816

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads