bd82d7dabd94cce9db8023e4d86184d55278c0a9d089f05f41c4fc60e53dcd55 | Triage

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20240220-en
resource tags

arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
submitted
24/05/2024, 12:49

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

core.dll
Size

299KB
MD5

e8c97849a14500a7caff84642bf14c29
SHA1

93ef3f5935b84e25fe502d5311651b9ece21b8e5
SHA256

bd82d7dabd94cce9db8023e4d86184d55278c0a9d089f05f41c4fc60e53dcd55
SHA512

e92a933b4e3caf81b26b6d7343379a6fd5c49c3941fb9a2b01ecb78357c917862292d2260526ddbd5a8febcb23c9a082ef3144a9a69d860e1678edf53158ee88
SSDEEP

6144:OrOIFqIMTdg2iiScxT8wBQ44F9naHIWDqxktiSWCIDbJiFOTL59ged:OrOPIMTdrScxTrxoWDqxktBWC0UFOH3b

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2320	2908	WerFault.exe	28

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 2868 wrote to memory of 2908	2868	rundll32.exe	28
PID 2868 wrote to memory of 2908	2868	rundll32.exe	28
PID 2868 wrote to memory of 2908	2868	rundll32.exe	28
PID 2868 wrote to memory of 2908	2868	rundll32.exe	28
PID 2868 wrote to memory of 2908	2868	rundll32.exe	28
PID 2868 wrote to memory of 2908	2868	rundll32.exe	28
PID 2868 wrote to memory of 2908	2868	rundll32.exe	28
PID 2908 wrote to memory of 2320	2908	rundll32.exe	29
PID 2908 wrote to memory of 2320	2908	rundll32.exe	29
PID 2908 wrote to memory of 2320	2908	rundll32.exe	29
PID 2908 wrote to memory of 2320	2908	rundll32.exe	29

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\core.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2868
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\core.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:2908
- - C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -u -p 2908 -s 220
    3⤵
    - Program crash
    PID:2320

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads