8a67ddc6e0166cb54eace3c5ca68b75f787d7fea5498310cb7589d7b59e83fd2

Analysis

max time kernel
117s
max time network
120s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
15-03-2024 13:33

Target

8a67ddc6e0166cb54eace3c5ca68b75f787d7fea5498310cb7589d7b59e83fd2.dll
Size

766KB
MD5

3606c110fa82c40639a3dc6eaffe3dc3
SHA1

379660e6a849317c8c8ee70e4a30d4dd4b64c86e
SHA256

8a67ddc6e0166cb54eace3c5ca68b75f787d7fea5498310cb7589d7b59e83fd2
SHA512

8f5305727529773030ccc58051afc5bd08542733d074b86ef5b1bd51d3998e2b4551df71cea507cc8efdacb07e0807a575f7ef131385b99ac8ccf4845d599f9d
SSDEEP

12288:qA/UFYdaEIapNgOiIZSaffJ+ic0+Sx3HPSFZ0MUWuFeymI+tscW7JC:qA/UE/IapNgOioSaHJ+lhufSFZNUIIWp

Score

1^/10

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 2200 wrote to memory of 1716	2200	regsvr32.exe	28
PID 2200 wrote to memory of 1716	2200	regsvr32.exe	28
PID 2200 wrote to memory of 1716	2200	regsvr32.exe	28
PID 2200 wrote to memory of 1716	2200	regsvr32.exe	28
PID 2200 wrote to memory of 1716	2200	regsvr32.exe	28
PID 2200 wrote to memory of 1716	2200	regsvr32.exe	28
PID 2200 wrote to memory of 1716	2200	regsvr32.exe	28

C:\Windows\system32\regsvr32.exe
regsvr32 /s C:\Users\Admin\AppData\Local\Temp\8a67ddc6e0166cb54eace3c5ca68b75f787d7fea5498310cb7589d7b59e83fd2.dll
1⤵
- Suspicious use of WriteProcessMemory
PID:2200
- C:\Windows\SysWOW64\regsvr32.exe
  /s C:\Users\Admin\AppData\Local\Temp\8a67ddc6e0166cb54eace3c5ca68b75f787d7fea5498310cb7589d7b59e83fd2.dll
  2⤵
  PID:1716