Analysis
- max time kernel
140s - max time network
155s - platform
windows10-2004_x64 - resource
win10v2004-20240226-en - resource tags
- submitted
20/03/2024, 01:57
General
- Target d79f5ae69496cc71285ed5ec67677e80.dll
- Size 176KB
- Sample240320-cdc7fsdh72
- SHA256 1158c40686086567a7c2e53db31b68a3a25110d269547123033c404e50a8bc3a
Malware Config
Signatures
- Program crash 1 IoCs
- Modifies registry class 3 IoCs
- Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Windows\system32\regsvr32.exeregsvr32 /s C:\Users\Admin\AppData\Local\Temp\d79f5ae69496cc71285ed5ec67677e80.dll1⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\regsvr32.exe/s C:\Users\Admin\AppData\Local\Temp\d79f5ae69496cc71285ed5ec67677e80.dll2⤵
- Modifies registry class
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2936 -s 7083⤵
- Program crash
-
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 2936 -ip 29361⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=1040 --field-trial-handle=2280,i,11703952675008463361,17436195144517971517,262144 --variations-seed-version /prefetch:81⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2936-0-0x0000000010000000-0x0000000010041000-memory.dmp
memory/2936-1-0x00000000007F0000-0x0000000000820000-memory.dmp
memory/2936-2-0x0000000000820000-0x0000000000823000-memory.dmp
memory/2936-3-0x00000000007E0000-0x00000000007E1000-memory.dmp
memory/2936-4-0x00000000009D0000-0x00000000009D1000-memory.dmp
memory/2936-5-0x00000000007C0000-0x00000000007C1000-memory.dmp
memory/2936-6-0x00000000007D0000-0x00000000007D1000-memory.dmp
memory/2936-7-0x0000000002180000-0x0000000002181000-memory.dmp
memory/2936-8-0x0000000002170000-0x0000000002171000-memory.dmp
memory/2936-9-0x00000000021A0000-0x00000000021A1000-memory.dmp
memory/2936-10-0x0000000002190000-0x0000000002191000-memory.dmp
memory/2936-11-0x00000000021D0000-0x00000000021D1000-memory.dmp
memory/2936-12-0x00000000021B0000-0x00000000021B1000-memory.dmp
memory/2936-13-0x00000000021F0000-0x00000000021F1000-memory.dmp
memory/2936-14-0x00000000021E0000-0x00000000021E1000-memory.dmp
memory/2936-15-0x0000000002210000-0x0000000002211000-memory.dmp
memory/2936-16-0x0000000002200000-0x0000000002201000-memory.dmp
memory/2936-17-0x0000000002230000-0x0000000002231000-memory.dmp
memory/2936-18-0x0000000002220000-0x0000000002221000-memory.dmp
memory/2936-19-0x0000000002250000-0x0000000002251000-memory.dmp
memory/2936-20-0x0000000002240000-0x0000000002241000-memory.dmp
memory/2936-21-0x0000000002270000-0x0000000002271000-memory.dmp
memory/2936-23-0x0000000002290000-0x0000000002291000-memory.dmp
memory/2936-24-0x0000000002280000-0x0000000002281000-memory.dmp
memory/2936-22-0x0000000002260000-0x0000000002261000-memory.dmp
memory/2936-25-0x00000000022B0000-0x00000000022B1000-memory.dmp
memory/2936-26-0x00000000022A0000-0x00000000022A1000-memory.dmp
memory/2936-27-0x00000000022D0000-0x00000000022D1000-memory.dmp
memory/2936-28-0x00000000022C0000-0x00000000022C1000-memory.dmp
memory/2936-29-0x00000000022F0000-0x00000000022F1000-memory.dmp
memory/2936-30-0x00000000022E0000-0x00000000022E1000-memory.dmp
memory/2936-31-0x0000000002310000-0x0000000002311000-memory.dmp
memory/2936-32-0x0000000002300000-0x0000000002301000-memory.dmp
memory/2936-33-0x0000000002330000-0x0000000002331000-memory.dmp
memory/2936-34-0x0000000002320000-0x0000000002321000-memory.dmp
memory/2936-35-0x0000000002350000-0x0000000002351000-memory.dmp
memory/2936-36-0x0000000002340000-0x0000000002341000-memory.dmp
memory/2936-37-0x0000000002380000-0x0000000002381000-memory.dmp
memory/2936-38-0x0000000002370000-0x0000000002371000-memory.dmp
memory/2936-39-0x00000000023A0000-0x00000000023A1000-memory.dmp
memory/2936-40-0x0000000002390000-0x0000000002391000-memory.dmp
memory/2936-41-0x00000000023C0000-0x00000000023C1000-memory.dmp
memory/2936-42-0x00000000023B0000-0x00000000023B1000-memory.dmp
memory/2936-43-0x00000000023E0000-0x00000000023E1000-memory.dmp
memory/2936-44-0x00000000023D0000-0x00000000023D1000-memory.dmp
memory/2936-45-0x0000000002400000-0x0000000002401000-memory.dmp
memory/2936-46-0x00000000023F0000-0x00000000023F1000-memory.dmp
memory/2936-47-0x0000000002420000-0x0000000002421000-memory.dmp
memory/2936-48-0x0000000002410000-0x0000000002411000-memory.dmp
memory/2936-49-0x0000000002440000-0x0000000002441000-memory.dmp
memory/2936-50-0x0000000002430000-0x0000000002431000-memory.dmp
memory/2936-51-0x0000000002460000-0x0000000002461000-memory.dmp
memory/2936-52-0x0000000002450000-0x0000000002451000-memory.dmp
memory/2936-53-0x0000000010000000-0x0000000010041000-memory.dmp
memory/2936-54-0x0000000010000000-0x0000000010041000-memory.dmp
memory/2936-55-0x00000000007F0000-0x0000000000820000-memory.dmp