Analysis
-
max time kernel
48s -
max time network
16s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
23-05-2024 00:24
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
libcurl.dll
Resource
win7-20240508-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
libcurl.dll
Resource
win10v2004-20240226-en
windows10-2004-x64
0 signatures
150 seconds
General
-
Target
libcurl.dll
-
Size
357KB
-
MD5
94f86810eb79615f97d72d8ad02898e1
-
SHA1
e7049e4f0d1e119401b38b9dcbf3ca9d6e4658f8
-
SHA256
3f8da5d739115b83063d1b10675a2c0d3ed0e9df1f3a919da35915351c437c12
-
SHA512
42ed49c66b823bbd5115bdf5395dc79d70c6bcc7313fbc1ce08280a0a2b77bea6fbddddde79e32d5bbf2f2ab4b72d7d0a4eccfc3cb9f08f067ceace2527f19d8
-
SSDEEP
6144:O8I388llM52ef90EyNjVPS7ZOAGB+Glo+PpfC3c1Ch38lzqRj+h:lL8llA0EMVkUl/51Chwz84
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes:
rundll32.exedescription pid process target process PID 2424 wrote to memory of 1004 2424 rundll32.exe WerFault.exe PID 2424 wrote to memory of 1004 2424 rundll32.exe WerFault.exe PID 2424 wrote to memory of 1004 2424 rundll32.exe WerFault.exe