ca9fa20f5cecf6a9988527835dc9cae2f03efa22b0e3a19f844161d709acfc63 | Triage

Analysis

max time kernel
121s
max time network
131s
platform
windows7_x64
resource
win7-20240215-en
resource tags

arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
submitted
05/06/2024, 13:14

Sharing

Report Analysis Logs

General

Target

Serum.dll
Size

8.0MB
MD5

9dfe5678103ab4ce53a00c1ca941478e
SHA1

7aa2067d04798fa5397c9e317198656c1cb59867
SHA256

38d3bfb09ae8b088d7938a6e535ce6d41d4f4bcb7db7c1c4ca56c4aa311dc3ee
SHA512

1262f03f73940c83ca9495fd0cf7a3aaba7ceaab01478deaa40bb4126d44cb0c84f8a8cee693291a4c83ea3da30a2f73e50ec32bf28d58ec14c5de2528db3136
SSDEEP

98304:regGcryh/f+Ejjc2W+YD+d2tH/GHlYbKbB3tODDc4iK897A:K/f9jDW+YD+dWaY+bB3tODDvCU

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2448	2324	WerFault.exe	28

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 2108 wrote to memory of 2324	2108	rundll32.exe	28
PID 2108 wrote to memory of 2324	2108	rundll32.exe	28
PID 2108 wrote to memory of 2324	2108	rundll32.exe	28
PID 2108 wrote to memory of 2324	2108	rundll32.exe	28
PID 2108 wrote to memory of 2324	2108	rundll32.exe	28
PID 2108 wrote to memory of 2324	2108	rundll32.exe	28
PID 2108 wrote to memory of 2324	2108	rundll32.exe	28
PID 2324 wrote to memory of 2448	2324	rundll32.exe	29
PID 2324 wrote to memory of 2448	2324	rundll32.exe	29
PID 2324 wrote to memory of 2448	2324	rundll32.exe	29
PID 2324 wrote to memory of 2448	2324	rundll32.exe	29

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\Serum.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2108
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\Serum.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:2324
- - C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -u -p 2324 -s 284
    3⤵
    - Program crash
    PID:2448

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads