31e94fb1540fe9de63bb2e24dbdc6553b97a2dc371a4b27e42fc30bb0f9f5d2e | Triage

Analysis

max time kernel
142s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
25/05/2024, 12:00

Sharing

Report Analysis Logs

General

Target

cmpbk32.dll
Size

25KB
MD5

5a6b1769e64d94855c0dcb0b0a9abd6e
SHA1

89295f83d3045fa2bd9b600bd386278b6cc80891
SHA256

31e94fb1540fe9de63bb2e24dbdc6553b97a2dc371a4b27e42fc30bb0f9f5d2e
SHA512

23fb9c17ed60a64103e647c3ac5e54cc78b224932f6cb4acb8fb44336a1ef1b9181b426b6273caa79b90a4543140d775ae4c5da8350673b3c6bd8ea15dabfe5c
SSDEEP

768:wNThhCfmYqyGAUN0d4PC7Ta41mgLB5EVVx:q9AUu6yTxMgLg

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4832	4480	WerFault.exe	89

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 4908 wrote to memory of 4480	4908	rundll32.exe	89
PID 4908 wrote to memory of 4480	4908	rundll32.exe	89
PID 4908 wrote to memory of 4480	4908	rundll32.exe	89

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\cmpbk32.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:4908
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\cmpbk32.dll,#1
  2⤵
  PID:4480
- - C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -u -p 4480 -s 616
    3⤵
    - Program crash
    PID:4832

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 360 -p 4480 -ip 4480
1⤵
PID:2888

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=3816 --field-trial-handle=2264,i,15001568551143786084,90255922961447677,262144 --variations-seed-version /prefetch:8
1⤵
PID:1184

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads