Analysis

  • max time kernel
    121s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    04-05-2024 11:02

General

  • Target

    Seguridad.dll

  • Size

    228KB

  • MD5

    4937dfb56023d9f33727c10865986943

  • SHA1

    cf9aa6877fda04af48d9319a226704b4bf46f177

  • SHA256

    50165ef998d9ee7c5ce29f07d95c48e4d72ba1dffbdc8c2165373d5de22aa8fd

  • SHA512

    2879db9aa169e412ede7f26ed5f5dfd1313947b3b781ea1cf7ff4bb52bf98af53fc9d130442e11910de344e5ec74d669f17412fa0278a38ebee5a65c3eece863

  • SSDEEP

    6144:bWoYdXW4FXVrt8y6lDHy7Qea/66nmdnFnJnJ3/n0vJXH0eYGe:yoSXW4frt8yoGa/b

Score
3/10

Malware Config

Signatures

  • Program crash 1 IoCs
  • Suspicious use of WriteProcessMemory 11 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\Seguridad.dll,#1
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2792
    • C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\Seguridad.dll,#1
      2⤵
      • Suspicious use of WriteProcessMemory
      PID:852
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 852 -s 260
        3⤵
        • Program crash
        PID:1932

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads