924bf9d65404884fa9860594e607d23d68cde275729c8e593f30b49f6534880f

Analysis

max time kernel
142s
max time network
161s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
23-05-2024 01:45

Target

924bf9d65404884fa9860594e607d23d68cde275729c8e593f30b49f6534880f.dll
Size

5.6MB
MD5

34b9d2fd3443d1be38877cfd6bbc3bcb
SHA1

5c574d51cf6b5956fc7800f44358b42891eae6c0
SHA256

924bf9d65404884fa9860594e607d23d68cde275729c8e593f30b49f6534880f
SHA512

01adb67584155ca1c55180bbb5113d0e56f529954af09e3ef265b840d0eee95e486d7f8abaec0029da8a88decccdfcccc6b9fb56433f942e61af33b1c7e30c19
SSDEEP

98304:Ns5sa/11iy79/pB0ilQiqnwWvtovwfVM1DR9:Ferv7qilYnDJuR9

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

regsvr32.exe

pid process

3284 regsvr32.exe

pid	process
3284	regsvr32.exe

Suspicious use of WriteProcessMemory 3 IoCs

Processes:

regsvr32.exe

description	pid	process	target process
PID 3204 wrote to memory of 3284	3204	regsvr32.exe	regsvr32.exe
PID 3204 wrote to memory of 3284	3204	regsvr32.exe	regsvr32.exe
PID 3204 wrote to memory of 3284	3204	regsvr32.exe	regsvr32.exe

C:\Windows\system32\regsvr32.exe
regsvr32 /s C:\Users\Admin\AppData\Local\Temp\924bf9d65404884fa9860594e607d23d68cde275729c8e593f30b49f6534880f.dll
1⤵
- Suspicious use of WriteProcessMemory
PID:3204

C:\Windows\SysWOW64\regsvr32.exe
/s C:\Users\Admin\AppData\Local\Temp\924bf9d65404884fa9860594e607d23d68cde275729c8e593f30b49f6534880f.dll
2⤵
- Suspicious use of SetWindowsHookEx
PID:3284

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=3708 --field-trial-handle=1928,i,13242902252791919845,10377620236057253993,262144 --variations-seed-version /prefetch:8
1⤵
PID:2548

memory/3284-0-0x0000000002070000-0x0000000002071000-memory.dmp

Filesize
4KB

Download
memory/3284-1-0x0000000002060000-0x0000000002061000-memory.dmp

Filesize
4KB

Download
memory/3284-2-0x0000000002080000-0x0000000002081000-memory.dmp

Filesize
4KB

Download