Analysis
- max time kernel
140s - max time network
125s - platform
windows7_x64 - resource
win7-20240221-en - resource tags
- submitted
08/05/2024, 15:37
General
- Target libfzclient-commonui-private-3-67-0.dll
- Size 611KB
- Sample240508-s2wayadh78
- SHA256 204f83f6bbdb707ddad08949403512035f30c10dea6f034b2d41c065f0255f3e
Score
1/10
Malware Config
Signatures
- Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\libfzclient-commonui-private-3-67-0.dll,#11⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 1888 -s 1922⤵
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1888-2-0x000007FEF6440000-0x000007FEF652F000-memory.dmp
memory/1888-3-0x000007FEF5EB0000-0x000007FEF5F54000-memory.dmp
memory/1888-1-0x000007FEF5F60000-0x000007FEF60BD000-memory.dmp
memory/1888-7-0x000007FEF7280000-0x000007FEF72A1000-memory.dmp
memory/1888-8-0x000007FEF5AA0000-0x000007FEF5C87000-memory.dmp
memory/1888-6-0x000007FEF72B0000-0x000007FEF7305000-memory.dmp
memory/1888-5-0x000007FEF7E90000-0x000007FEF7ED9000-memory.dmp
memory/1888-4-0x000007FEF5C90000-0x000007FEF5EA3000-memory.dmp
memory/1888-0-0x000007FEF71D0000-0x000007FEF726E000-memory.dmp