0db9ac02645846b5033b403a818544371046214bfedef7e70d44f5f825713c00 | Triage

Analysis

max time kernel
118s
max time network
125s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
26-03-2024 08:59

Sharing

Report Analysis Logs

General

Target

7z.dll
Size

1.1MB
MD5

e7ae42ea24cff97bdead0c560ef2add1
SHA1

866f380a62622ab1b6c7705ddc116635e6e3cc86
SHA256

db2897eeea65401ee1bd8feeebd0dbae8867a27ff4575f12b0b8a613444a5ef7
SHA512

a4a27b2be70e9102d95ee319ec365b0dc434d4e8cd25589ce8a75b73bbe4f06b071caa907c7a61387b2ce6a35a70873593564499b88598f77a7c25c47448fb0a
SSDEEP

24576:ax6t04DSc9S0B07sjsPEtd+F5zrtV53SePrnvgwPWrlahtN:axBOp1B07sjsPEtd2znPrnIwuh0N

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2684	2680	WerFault.exe	28

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 2492 wrote to memory of 2680	2492	rundll32.exe	28
PID 2492 wrote to memory of 2680	2492	rundll32.exe	28
PID 2492 wrote to memory of 2680	2492	rundll32.exe	28
PID 2492 wrote to memory of 2680	2492	rundll32.exe	28
PID 2492 wrote to memory of 2680	2492	rundll32.exe	28
PID 2492 wrote to memory of 2680	2492	rundll32.exe	28
PID 2492 wrote to memory of 2680	2492	rundll32.exe	28
PID 2680 wrote to memory of 2684	2680	rundll32.exe	29
PID 2680 wrote to memory of 2684	2680	rundll32.exe	29
PID 2680 wrote to memory of 2684	2680	rundll32.exe	29
PID 2680 wrote to memory of 2684	2680	rundll32.exe	29

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\7z.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2492
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\7z.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:2680
- - C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -u -p 2680 -s 224
    3⤵
    - Program crash
    PID:2684

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads