bf9f383bd10ca183ccf932eb42f55b47403164b21cf17df3efd9508db38d3960 | Triage

Resubmissions

08-05-2024 18:47

240508-xe74fahf4y 7

08-05-2024 18:39

240508-xamlyabh63 7

Analysis

max time kernel
118s
max time network
123s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
08-05-2024 18:47

Sharing

Report Analysis Logs

General

Target

opencv_world320d.dll
Size

48.7MB
MD5

cd7b4932b70603a90475dc4c7e0bb389
SHA1

3d0dc0ee521cce0b7c37e68e9b099fd37694eb59
SHA256

a81989b1d7d77b8db2cebe26344dd0fe00aa2bb78ddcb6f11fc70dc3d4a26e43
SHA512

653ff36faabff57f448f1a2935a93ad866e9d8f00f05dd5cef84e39576348b89f5f415b442e94f7ab3e383ecce94b4eda486a36b067ab6d4d6f8e7a94cdbebed
SSDEEP

786432:sCL7LaFicmY6rekzJ/VMe8mb0ivqTDhbbF:s07LaFiyGekzJ/VMe8mb0ivqTDhbbF

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 2940 wrote to memory of 2356	2940	rundll32.exe	28
PID 2940 wrote to memory of 2356	2940	rundll32.exe	28
PID 2940 wrote to memory of 2356	2940	rundll32.exe	28
PID 2940 wrote to memory of 2356	2940	rundll32.exe	28
PID 2940 wrote to memory of 2356	2940	rundll32.exe	28
PID 2940 wrote to memory of 2356	2940	rundll32.exe	28
PID 2940 wrote to memory of 2356	2940	rundll32.exe	28

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\opencv_world320d.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2940
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\opencv_world320d.dll,#1
  2⤵
  PID:2356

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads