Analysis

  • max time kernel
    92s
  • max time network
    124s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240412-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19/04/2024, 03:38

General

  • Target

    TaijiName/oleaut32.dll

  • Size

    538KB

  • MD5

    aaf9270361b3a48bab55b81fd72d7e20

  • SHA1

    b9cf5de9017751532903844206d034a991bdf2e7

  • SHA256

    189d312b698459495688dfb2380b34f34d3bebd3ea98ab3736863a58f3925588

  • SHA512

    678e2739d80de37ead0af4245e68fc245d82c71c81d9a4c66bd38a6ea8c767d13c5065e8d7d0b184101012a09cfd6d21ab80d14b1ccf8b289822261237369198

  • SSDEEP

    12288:r+sNcfS35GSqbuvZiXOXWd6B+vWXf0Im9k1c5q3Etin9N:yNfSYuvZiXOXjB+cL1c5qein9N

Score
1/10

Malware Config

Signatures

  • Modifies registry class 64 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Windows\system32\regsvr32.exe
    regsvr32 /s C:\Users\Admin\AppData\Local\Temp\TaijiName\oleaut32.dll
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1096
    • C:\Windows\SysWOW64\regsvr32.exe
      /s C:\Users\Admin\AppData\Local\Temp\TaijiName\oleaut32.dll
      2⤵
      • Modifies registry class
      PID:2864

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads