808ccd81cbb014df3475fa04ffc0fae33470a6d2279052dce33349f208558100 | Triage

Analysis

max time kernel
121s
max time network
126s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
23/05/2024, 03:24

Sharing

Report Analysis Logs

General

Target

KeyLib.dll
Size

104KB
MD5

3270468a681ce2f3b698daca489346e2
SHA1

72e9e5a6896b8dfae2ee97c175991d62c91dafd4
SHA256

6daa28470c8e539bfac769b5c36f1bc4c656f24d66dbd3e8651c442a3b51543e
SHA512

b8e7534682899941fc593e62b34badf8d95f7a29fa9f018bce9f921c330bd075ad3fca8da59f1898d2b75daba4cd5bf652a79698de32c2215b49c0a20ed9b3c8
SSDEEP

768:ImhRRhGPmdnt/p87ivJe67JbbcjpeWjYrxS5yTmRULH/emoHalXi:ImhRRhAmb/v9lMjpvyg+H/7oHapi

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2028	2164	WerFault.exe	28

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 2148 wrote to memory of 2164	2148	rundll32.exe	28
PID 2148 wrote to memory of 2164	2148	rundll32.exe	28
PID 2148 wrote to memory of 2164	2148	rundll32.exe	28
PID 2148 wrote to memory of 2164	2148	rundll32.exe	28
PID 2148 wrote to memory of 2164	2148	rundll32.exe	28
PID 2148 wrote to memory of 2164	2148	rundll32.exe	28
PID 2148 wrote to memory of 2164	2148	rundll32.exe	28
PID 2164 wrote to memory of 2028	2164	rundll32.exe	29
PID 2164 wrote to memory of 2028	2164	rundll32.exe	29
PID 2164 wrote to memory of 2028	2164	rundll32.exe	29
PID 2164 wrote to memory of 2028	2164	rundll32.exe	29

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\KeyLib.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2148
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\KeyLib.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:2164
- - C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -u -p 2164 -s 260
    3⤵
    - Program crash
    PID:2028

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads