12978eef9daed92259dc10c461bdf027cc646b49425f9941da73d4ded1483d86 | Triage

Analysis

max time kernel
119s
max time network
129s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
14/06/2024, 20:18

Sharing

Report Analysis Logs

General

Target

ParseDVD.dll
Size

83KB
MD5

d67cc35da995c97db79a6534856b3cfa
SHA1

7842d11a12ed8c4beed017d5bade223cd92f1e89
SHA256

b8a3ccad09e459214d59ee08c30e7f661580d1b5e124b9824d73d9ed1741c33d
SHA512

a1747b9ff779a4418072b31155f866201aeecfa037ad3b6cfbfa586f4ebc8a052a72ab66c5f92cbfd0afbad99bb7bd40d1be3b9b5003f954d14b2371d6620fab
SSDEEP

1536:jtXp9G/dt/p+M5Edw6Lj7HVFSTjeG2n7rqju+xL1Iq10iH3wajs:jQdtR+FLj7mTjeG2ncu27Xwd

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2260	2344	WerFault.exe	28

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 2408 wrote to memory of 2344	2408	rundll32.exe	28
PID 2408 wrote to memory of 2344	2408	rundll32.exe	28
PID 2408 wrote to memory of 2344	2408	rundll32.exe	28
PID 2408 wrote to memory of 2344	2408	rundll32.exe	28
PID 2408 wrote to memory of 2344	2408	rundll32.exe	28
PID 2408 wrote to memory of 2344	2408	rundll32.exe	28
PID 2408 wrote to memory of 2344	2408	rundll32.exe	28
PID 2344 wrote to memory of 2260	2344	rundll32.exe	29
PID 2344 wrote to memory of 2260	2344	rundll32.exe	29
PID 2344 wrote to memory of 2260	2344	rundll32.exe	29
PID 2344 wrote to memory of 2260	2344	rundll32.exe	29

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\ParseDVD.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2408
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\ParseDVD.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:2344
- - C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -u -p 2344 -s 220
    3⤵
    - Program crash
    PID:2260

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads