Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
19-06-2024 18:19
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2024-04-18-SSLoad-DLL.dll
Resource
win7-20240508-en
windows7-x64
1 signatures
150 seconds
General
-
Target
2024-04-18-SSLoad-DLL.dll
-
Size
1.8MB
-
MD5
ca303668b5420c022ef9c78ce1f2bfb7
-
SHA1
959a727b907b395aec2b05e5892e2bf78cb5544b
-
SHA256
73774861d946d62c2105fef4718683796cb77de7ed42edaec7affcee5eb0a0ee
-
SHA512
a550f4f0487b0467ebf8827fa336c57368fe9debb68cda0b8b3f486d5189a5bbe1ed4c42ae4a6effc60dd6f5f65c6fef6e7ea9592aef2c121f9babc252c37c4d
-
SSDEEP
49152:XasPOtjnq0Fx47oxpxuZZFIGkTagevclh:XasPUjnqKIodcZYeTvclh
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 7 IoCs
Processes:
regsvr32.exedescription pid process target process PID 2936 wrote to memory of 2992 2936 regsvr32.exe regsvr32.exe PID 2936 wrote to memory of 2992 2936 regsvr32.exe regsvr32.exe PID 2936 wrote to memory of 2992 2936 regsvr32.exe regsvr32.exe PID 2936 wrote to memory of 2992 2936 regsvr32.exe regsvr32.exe PID 2936 wrote to memory of 2992 2936 regsvr32.exe regsvr32.exe PID 2936 wrote to memory of 2992 2936 regsvr32.exe regsvr32.exe PID 2936 wrote to memory of 2992 2936 regsvr32.exe regsvr32.exe