fa75c37b3542a39489f72dade86cd1679e0a42cf373e52950b571148e494e40b | Triage

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
26/05/2024, 12:39

Sharing

Report Analysis Logs

General

Target

NlsData001a.dll
Size

1.9MB
MD5

2d6314aecda74e63124e5ac221d4879e
SHA1

06a1a7d09a7fe3c37604b6a6d32870402e1283f5
SHA256

fa75c37b3542a39489f72dade86cd1679e0a42cf373e52950b571148e494e40b
SHA512

9c348ea0faf4579aa70065006083a3d847c8e144bfef71ac745eba8cec0cf4b5d7f77095ef07c06401e673d81b6c677e01ae54e8937ede7e05385c131ff5ac34
SSDEEP

24576:OpHWcAbes/4jtCJ1EOAQ4HQWMxYlKpXBFVI3:PcAbF/lbElQRWMxYlKBVI

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2252	2248	WerFault.exe	28

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 2220 wrote to memory of 2248	2220	rundll32.exe	28
PID 2220 wrote to memory of 2248	2220	rundll32.exe	28
PID 2220 wrote to memory of 2248	2220	rundll32.exe	28
PID 2220 wrote to memory of 2248	2220	rundll32.exe	28
PID 2220 wrote to memory of 2248	2220	rundll32.exe	28
PID 2220 wrote to memory of 2248	2220	rundll32.exe	28
PID 2220 wrote to memory of 2248	2220	rundll32.exe	28
PID 2248 wrote to memory of 2252	2248	rundll32.exe	29
PID 2248 wrote to memory of 2252	2248	rundll32.exe	29
PID 2248 wrote to memory of 2252	2248	rundll32.exe	29
PID 2248 wrote to memory of 2252	2248	rundll32.exe	29

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\NlsData001a.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2220
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\NlsData001a.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:2248
- - C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -u -p 2248 -s 220
    3⤵
    - Program crash
    PID:2252

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads