0e01936d97159c8da1f0dcd0ff018e84dc873b355bbfbd4c1aa2011bcaa64ac1 | Triage

Analysis

max time kernel
117s
max time network
123s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
18-03-2024 19:19

Sharing

Report Analysis Logs

General

Target

rld.mp3/binkw32.dll
Size

221KB
MD5

2d72418b2d6e6fc6176d8c0ce5ab79d9
SHA1

476a8661e6cd9829d8bfa17e44cd4541429ac9d1
SHA256

092e34bd770434d148ff450f32e6cfc0b2acc5d8500c2a97a21d7c56917d74ce
SHA512

fb965ef82d90d65c00044a5e3fb1876e7bf5319c84681b480eb7563a1dda813343fab7622444ebb4b7d6fdaebf53067079cc8b0a1d8e93fb3ebdb324f9cbd24b
SSDEEP

6144:6cwfS9T96c4x0sDdrI1tJTGUnIIIiphHeXf+R:6cwfS9Ti0sDdrqTN+v+R

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2052	2144	WerFault.exe	28

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 1252 wrote to memory of 2144	1252	rundll32.exe	28
PID 1252 wrote to memory of 2144	1252	rundll32.exe	28
PID 1252 wrote to memory of 2144	1252	rundll32.exe	28
PID 1252 wrote to memory of 2144	1252	rundll32.exe	28
PID 1252 wrote to memory of 2144	1252	rundll32.exe	28
PID 1252 wrote to memory of 2144	1252	rundll32.exe	28
PID 1252 wrote to memory of 2144	1252	rundll32.exe	28
PID 2144 wrote to memory of 2052	2144	rundll32.exe	29
PID 2144 wrote to memory of 2052	2144	rundll32.exe	29
PID 2144 wrote to memory of 2052	2144	rundll32.exe	29
PID 2144 wrote to memory of 2052	2144	rundll32.exe	29

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\rld.mp3\binkw32.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:1252
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\rld.mp3\binkw32.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:2144
- - C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -u -p 2144 -s 232
    3⤵
    - Program crash
    PID:2052

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads