a00efafb9deb99a99bfdd34f55818983e9cc675d1cac6b71b9fec4b0bea1aa56 | Triage

Analysis

max time kernel
119s
max time network
121s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
01-07-2024 08:22

Sharing

Report Analysis Logs

General

Target

CoralDb.dll
Size

1.0MB
MD5

c97b98c70ec8e4407879270b3ffe8984
SHA1

f226b353a5090931186842b36f01fb6d3f089760
SHA256

4e7b5abf6df3b4ca12e1edb1543344452446da9ac3fdb27e5bf754ae09906714
SHA512

f8f3eca681855bbaee443053f8429c4785838edb379588beb501fa6ac6d0de8ea6c2ec9136a3d8a0005bb48efd7fd7a2a9741eb78d3dca8e49081ee4a817275b
SSDEEP

24576:NopftMsUXD8fv+A8x1+RsZnnIIQvzNnqf4P9pTmboiiSDEgd4:IeGx8LIef4P9pTmboiiS5d4

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2976	2936	WerFault.exe	28

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 2884 wrote to memory of 2936	2884	rundll32.exe	28
PID 2884 wrote to memory of 2936	2884	rundll32.exe	28
PID 2884 wrote to memory of 2936	2884	rundll32.exe	28
PID 2884 wrote to memory of 2936	2884	rundll32.exe	28
PID 2884 wrote to memory of 2936	2884	rundll32.exe	28
PID 2884 wrote to memory of 2936	2884	rundll32.exe	28
PID 2884 wrote to memory of 2936	2884	rundll32.exe	28
PID 2936 wrote to memory of 2976	2936	rundll32.exe	29
PID 2936 wrote to memory of 2976	2936	rundll32.exe	29
PID 2936 wrote to memory of 2976	2936	rundll32.exe	29
PID 2936 wrote to memory of 2976	2936	rundll32.exe	29

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\CoralDb.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2884
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\CoralDb.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:2936
- - C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -u -p 2936 -s 240
    3⤵
    - Program crash
    PID:2976

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads