1d14500a00d5f63a796ae8002eaacb21ee3feb348ab52f3d74c85c0f914347c5 | Triage

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
22/05/2024, 00:24

Sharing

Report Analysis Logs

General

Target

bin/MSVCRT.dll
Size

260KB
MD5

0b9c183d1565b48fa6e5d1d3d4b86bcc
SHA1

69697324c1e7ad80215fb07ecf6d786e378c568f
SHA256

2d5670881a6d13a100e37da297f6eeb876f68b63073a28eb5d650625c60f9bf7
SHA512

c836a4789270b216f8505074ce34b11d0b509e14b25133f3aab8db55ba5451e150b6633c4392cc83c1007f64da1c824596ff4a77aab5f7d340be4f631b2935f8
SSDEEP

6144:yncoHbacxB5pdVEweKMph18/VhTORAeFMWiFaNF7R5LWCC0uOpL:yncIbac33dVfnM2/Vg/5Bhum

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
968	2348	WerFault.exe	28

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 2172 wrote to memory of 2348	2172	rundll32.exe	28
PID 2172 wrote to memory of 2348	2172	rundll32.exe	28
PID 2172 wrote to memory of 2348	2172	rundll32.exe	28
PID 2172 wrote to memory of 2348	2172	rundll32.exe	28
PID 2172 wrote to memory of 2348	2172	rundll32.exe	28
PID 2172 wrote to memory of 2348	2172	rundll32.exe	28
PID 2172 wrote to memory of 2348	2172	rundll32.exe	28
PID 2348 wrote to memory of 968	2348	rundll32.exe	29
PID 2348 wrote to memory of 968	2348	rundll32.exe	29
PID 2348 wrote to memory of 968	2348	rundll32.exe	29
PID 2348 wrote to memory of 968	2348	rundll32.exe	29

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\bin\MSVCRT.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2172
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\bin\MSVCRT.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:2348
- - C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -u -p 2348 -s 224
    3⤵
    - Program crash
    PID:968

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads