12978eef9daed92259dc10c461bdf027cc646b49425f9941da73d4ded1483d86 | Triage

Analysis

max time kernel
120s
max time network
124s
platform
windows7_x64
resource
win7-20240220-en
resource tags

arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
submitted
14/06/2024, 20:18

Sharing

Report Analysis Logs

General

Target

DuiLib_u.dll
Size

425KB
MD5

58afc94e30f77281aeccbc3908b56729
SHA1

6101614afcc975212ba8f5c110cca13909c06949
SHA256

af62011d1e8442102020db94518eb2a97e6c90db01009c500ca5e9a9fc6e7b44
SHA512

0a6e420d97be685ccddca3aaa503fa91625df6453a8c8aec046c69651d35dc10d8b0074cbe042f0ccadf4d24b3676e91622bf85ad757c6c0767a841b65bed717
SSDEEP

6144:6FIvKBO6G6CNREaw9wZW/gRHG3OcxW+MhOn67rf7tDG:6FCKBmVAb/g7cc5hxG

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1360	2144	WerFault.exe	29

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 2188 wrote to memory of 2144	2188	rundll32.exe	29
PID 2188 wrote to memory of 2144	2188	rundll32.exe	29
PID 2188 wrote to memory of 2144	2188	rundll32.exe	29
PID 2188 wrote to memory of 2144	2188	rundll32.exe	29
PID 2188 wrote to memory of 2144	2188	rundll32.exe	29
PID 2188 wrote to memory of 2144	2188	rundll32.exe	29
PID 2188 wrote to memory of 2144	2188	rundll32.exe	29
PID 2144 wrote to memory of 1360	2144	rundll32.exe	30
PID 2144 wrote to memory of 1360	2144	rundll32.exe	30
PID 2144 wrote to memory of 1360	2144	rundll32.exe	30
PID 2144 wrote to memory of 1360	2144	rundll32.exe	30

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\DuiLib_u.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2188
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\DuiLib_u.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:2144
- - C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -u -p 2144 -s 228
    3⤵
    - Program crash
    PID:1360

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads