89f043aa1927f890984de9f93123c36f9e0b2d15832be6e623573ab037157d40 | Triage

Analysis

max time kernel
91s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
28-05-2024 12:02

Sharing

Report Analysis Logs

General

Target

StorageContextHandler.dll
Size

70KB
MD5

c05b949ec0e059a4de5ccc08eaac9edc
SHA1

339f7db6f1c3903a7a71f936866e24af396b2067
SHA256

89f043aa1927f890984de9f93123c36f9e0b2d15832be6e623573ab037157d40
SHA512

0b225d76648bc939ba6dcb18ee4b7428fc70644b369db96a843a82c007962db5ea3d864bb973a53d2ce25d007910d8a6af9d7dad09392b04d473f55279da9d69
SSDEEP

1536:sFm6aKwFMTFqU85q80b+43HiHec60gNWsLPtenVdRVF:i63EVynv60qPwzRVF

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 804 wrote to memory of 3004	804	regsvr32.exe	84
PID 804 wrote to memory of 3004	804	regsvr32.exe	84
PID 804 wrote to memory of 3004	804	regsvr32.exe	84

C:\Windows\system32\regsvr32.exe
regsvr32 /s C:\Users\Admin\AppData\Local\Temp\StorageContextHandler.dll
1⤵
- Suspicious use of WriteProcessMemory
PID:804
- C:\Windows\SysWOW64\regsvr32.exe
  /s C:\Users\Admin\AppData\Local\Temp\StorageContextHandler.dll
  2⤵
  PID:3004

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads