Analysis
- max time kernel
150s - max time network
155s - platform
windows10-2004_x64 - resource
win10v2004-20240226-en - resource tags
- submitted
26/03/2024, 10:46
General
- Target def9bf85999d1f9ba0b78cb44e581f69.dll
- Size 174KB
- Sample240326-mt9kpsbc5v
- SHA256 e224caaa55a54a134181d4221e6e87625c4ed1f986aac2ca72f218ffedf2966e
Score
1/10
Malware Config
Signatures
- Modifies registry class 17 IoCs
- Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Windows\system32\regsvr32.exeregsvr32 /s C:\Users\Admin\AppData\Local\Temp\def9bf85999d1f9ba0b78cb44e581f69.dll1⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\regsvr32.exe/s C:\Users\Admin\AppData\Local\Temp\def9bf85999d1f9ba0b78cb44e581f69.dll2⤵
- Modifies registry class
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2432-0-0x0000000010000000-0x0000000010040000-memory.dmp
memory/2432-1-0x0000000002A90000-0x0000000002AC0000-memory.dmp
memory/2432-2-0x0000000002A70000-0x0000000002A73000-memory.dmp
memory/2432-3-0x0000000002A80000-0x0000000002A81000-memory.dmp
memory/2432-4-0x0000000001200000-0x0000000001201000-memory.dmp
memory/2432-5-0x0000000002C00000-0x0000000002C01000-memory.dmp
memory/2432-6-0x0000000002C30000-0x0000000002C31000-memory.dmp
memory/2432-7-0x0000000002C50000-0x0000000002C51000-memory.dmp
memory/2432-8-0x0000000002C70000-0x0000000002C71000-memory.dmp
memory/2432-9-0x0000000002CC0000-0x0000000002CC1000-memory.dmp
memory/2432-10-0x0000000002CE0000-0x0000000002CE1000-memory.dmp
memory/2432-11-0x0000000002CD0000-0x0000000002CD1000-memory.dmp