8b9c616997dbcdb467a300a749721233fe167a8c1072a89e24e26267714f7572 | Triage

Analysis

max time kernel
121s
max time network
124s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
26/05/2024, 12:17

Sharing

Report Analysis Logs

General

Target

NlsData0046.dll
Size

3.0MB
MD5

080815ef58efc19dbb31b5033cefe388
SHA1

122463ef231d7e2754033caf8eabdd55161bcbfa
SHA256

8b9c616997dbcdb467a300a749721233fe167a8c1072a89e24e26267714f7572
SHA512

19370f34cd499b059939c5d0fb988de2affb9c1acb7b8ee52e4098965588e01e9d7467242e99d9f17dbb99a4c613fa9e73ecc77098f16ffdd9601178b73650ca
SSDEEP

24576:iJEJNe9wndvrpof5UUv6ujcqJByewHXqQpiPl99qSabr:K9CNofaXXqQpuqlb

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2488	2192	WerFault.exe	28

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 2116 wrote to memory of 2192	2116	rundll32.exe	28
PID 2116 wrote to memory of 2192	2116	rundll32.exe	28
PID 2116 wrote to memory of 2192	2116	rundll32.exe	28
PID 2116 wrote to memory of 2192	2116	rundll32.exe	28
PID 2116 wrote to memory of 2192	2116	rundll32.exe	28
PID 2116 wrote to memory of 2192	2116	rundll32.exe	28
PID 2116 wrote to memory of 2192	2116	rundll32.exe	28
PID 2192 wrote to memory of 2488	2192	rundll32.exe	29
PID 2192 wrote to memory of 2488	2192	rundll32.exe	29
PID 2192 wrote to memory of 2488	2192	rundll32.exe	29
PID 2192 wrote to memory of 2488	2192	rundll32.exe	29

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\NlsData0046.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2116
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\NlsData0046.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:2192
- - C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -u -p 2192 -s 220
    3⤵
    - Program crash
    PID:2488

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads