ec60beee43104003bc410371ae1ef8e846e17ff5733556dbd8e7acae68058200 | Triage

Analysis

max time kernel
118s
max time network
120s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
26/04/2024, 15:35

Sharing

Report Analysis Logs

General

Target

bin/softokn3.dll
Size

166KB
MD5

6832b9a7ab871d81be42054f117b8299
SHA1

935c0fe7e6cb356a8854e3b7046fd7fc0aa29c61
SHA256

b1316e04b3bf464906f4e015d3e71b4e06a65cc6e59a20a96984ee1e862dcb0e
SHA512

e6579f7df7b3c43219e47630a6b51a576d2ffa9902ddb0f309f5ccb210242dd16ebec75439b2bac22e5cb0b62984386cb6eb4190b2914827b79e3e4afbbdee9c
SSDEEP

3072:+dGb9/jT+3ZazHitaf6fc5q/RYmgdwy6jnwU8AF+3eWQAZHbC:+dGb9/+3sLia6u7Ih8AsRhBe

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1992	2212	WerFault.exe	28

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 2368 wrote to memory of 2212	2368	rundll32.exe	28
PID 2368 wrote to memory of 2212	2368	rundll32.exe	28
PID 2368 wrote to memory of 2212	2368	rundll32.exe	28
PID 2368 wrote to memory of 2212	2368	rundll32.exe	28
PID 2368 wrote to memory of 2212	2368	rundll32.exe	28
PID 2368 wrote to memory of 2212	2368	rundll32.exe	28
PID 2368 wrote to memory of 2212	2368	rundll32.exe	28
PID 2212 wrote to memory of 1992	2212	rundll32.exe	29
PID 2212 wrote to memory of 1992	2212	rundll32.exe	29
PID 2212 wrote to memory of 1992	2212	rundll32.exe	29
PID 2212 wrote to memory of 1992	2212	rundll32.exe	29

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\bin\softokn3.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2368
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\bin\softokn3.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:2212
- - C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -u -p 2212 -s 228
    3⤵
    - Program crash
    PID:1992

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads