dcaacf44e38bf5f44cc5ef96b64a35ede43457a75e89364cf1cddf88a01bc108 | Triage

Analysis

max time kernel
117s
max time network
120s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
08/04/2024, 23:45

Sharing

Report Analysis Logs

General

Target

Encrypt.dll
Size

64KB
MD5

5468eb7b4cd7e648a337a187e565447d
SHA1

f0269db098eb699ec7583ab40dd4bfb311a51b5d
SHA256

68cf718e9196b462248af847a430e7c40e2b1e3c9022d02e8cbfc21b1321f3be
SHA512

af48c98fd449f7e4733605cc6c57259df459f49820f7a572174a9b07dfd52c1fe9c0cd8b6866463c72b1150c9d5505dbb580bffb276f85ef19650a5dac7e9d43
SSDEEP

768:l9MVMloL02y2aP8ny4X+RW5yBWVB+Tyy0RiNWMx5j:l9wMlygmX+RW5GWwyy0cr5

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2860	2292	WerFault.exe	28

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 2212 wrote to memory of 2292	2212	rundll32.exe	28
PID 2212 wrote to memory of 2292	2212	rundll32.exe	28
PID 2212 wrote to memory of 2292	2212	rundll32.exe	28
PID 2212 wrote to memory of 2292	2212	rundll32.exe	28
PID 2212 wrote to memory of 2292	2212	rundll32.exe	28
PID 2212 wrote to memory of 2292	2212	rundll32.exe	28
PID 2212 wrote to memory of 2292	2212	rundll32.exe	28
PID 2292 wrote to memory of 2860	2292	rundll32.exe	29
PID 2292 wrote to memory of 2860	2292	rundll32.exe	29
PID 2292 wrote to memory of 2860	2292	rundll32.exe	29
PID 2292 wrote to memory of 2860	2292	rundll32.exe	29

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\Encrypt.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2212
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\Encrypt.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:2292
- - C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -u -p 2292 -s 228
    3⤵
    - Program crash
    PID:2860

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads