Analysis
-
max time kernel
120s -
max time network
137s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
15/03/2024, 20:08
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
cc508807550035075311882c7bb9e31d.dll
Resource
win7-20240221-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
cc508807550035075311882c7bb9e31d.dll
Resource
win10v2004-20240226-en
2 signatures
150 seconds
General
-
Target
cc508807550035075311882c7bb9e31d.dll
-
Size
80KB
-
MD5
cc508807550035075311882c7bb9e31d
-
SHA1
48ddd3a8bcbb714ca5b249a029e06487716ea5ab
-
SHA256
9bce8f93829aff5806374a71eed27a5e65e33dbe94535494bab23208230c7ab3
-
SHA512
c679bd6b657d4daa06f3ae82bf9ff0f383f9daaeae8c3ef4df919118a066e07eae7dfe5554007bfb4c57ac99bbe96204d8cb3e9bccc055f1111e161cc8cc885f
-
SSDEEP
1536:PwNTrFUKxKVcPV36nDyF3yYT85bxMtT/7mB9NSXhH+ZA3otM33NOzeZrVoAXP5U:PwNTKVWyOXSxMB/CB9chH+ov3QKZrDXe
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 7 IoCs
description pid Process procid_target PID 2900 wrote to memory of 2532 2900 regsvr32.exe 28 PID 2900 wrote to memory of 2532 2900 regsvr32.exe 28 PID 2900 wrote to memory of 2532 2900 regsvr32.exe 28 PID 2900 wrote to memory of 2532 2900 regsvr32.exe 28 PID 2900 wrote to memory of 2532 2900 regsvr32.exe 28 PID 2900 wrote to memory of 2532 2900 regsvr32.exe 28 PID 2900 wrote to memory of 2532 2900 regsvr32.exe 28