1b286678c8cdc68efc2c36261d6d898c456e24ce5fcc9e881423ba9402849037 | Triage

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
26/05/2024, 23:25

Sharing

Report Analysis Logs

General

Target

Nanolib.dll
Size

64KB
MD5

c50198b0f9c47d3c886bef4c5b890d7e
SHA1

04e9037f7fb3da2b7a416c341c89ffa5e558e50c
SHA256

923ba4b6fe82e8a76363f791cc10a3aabb4eb3e7623cb944435cab9ebe8f4c7a
SHA512

764d5e2f83c6d1ed09b63690ea2c5cf2bc15aea5e72d3aa56649405ed064f227b262b153ac5cba059d4814022f1167c49661958fcde0d50533ec07119e919c82
SSDEEP

768:LylOd0rEZQ0PRKfZXc3vpQYrRFbuRwl7IQEtPD7+t6s6phDiumcR:Ly8SGQUwXwBQuRFbuRwhIRqtADio

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3044	2972	WerFault.exe	28

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 2784 wrote to memory of 2972	2784	rundll32.exe	28
PID 2784 wrote to memory of 2972	2784	rundll32.exe	28
PID 2784 wrote to memory of 2972	2784	rundll32.exe	28
PID 2784 wrote to memory of 2972	2784	rundll32.exe	28
PID 2784 wrote to memory of 2972	2784	rundll32.exe	28
PID 2784 wrote to memory of 2972	2784	rundll32.exe	28
PID 2784 wrote to memory of 2972	2784	rundll32.exe	28
PID 2972 wrote to memory of 3044	2972	rundll32.exe	29
PID 2972 wrote to memory of 3044	2972	rundll32.exe	29
PID 2972 wrote to memory of 3044	2972	rundll32.exe	29
PID 2972 wrote to memory of 3044	2972	rundll32.exe	29

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\Nanolib.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2784
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\Nanolib.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:2972
- - C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -u -p 2972 -s 224
    3⤵
    - Program crash
    PID:3044

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads