Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    21-05-2024 15:19

General

  • Target

    components/IBitCometExtension.dll

  • Size

    1012KB

  • MD5

    08718f3054c668a3da2f124f49e35026

  • SHA1

    982159038a7628c4c372ac08b76edf64646f550e

  • SHA256

    3cea824a822bb41e1b7fee01825324014ba0747d79e8800fb549957b9cbf0203

  • SHA512

    5f0c190f5adf659d8067d5618744a98a892f6be9fa5024cde82e35edf33a09f3bc983c80f3f8ffa112c391503197d824c6fc21249e8625d2332f86ec93d8d062

  • SSDEEP

    12288:mcNbGh/pN7wesyvh/PwizR5nn5aHamj37uyt+7pDxaB:mcVGh/pN7weNlPweReHamL7uN

Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 7 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\components\IBitCometExtension.dll,#1
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2360
    • C:\Windows\SysWOW64\rundll32.exe
      rundll32.exe C:\Users\Admin\AppData\Local\Temp\components\IBitCometExtension.dll,#1
      2⤵
        PID:3036

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads