cbe8bec689fc989f522ce95716bc7eacc85cfba7117b348c257130fab6fef317 | Triage

Analysis

max time kernel
117s
max time network
120s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
20-07-2024 08:04

Sharing

Report Analysis Logs

General

Target

$0/TCPDeliver.dll
Size

340KB
MD5

64b49b64bc5bc2fd964ca53ff85c7fb3
SHA1

f18e2f452d8e94c48fe64ffbc89cb93320217a98
SHA256

f8a0e4f71d1955fcadaa534294a5ea168340814720b53eecb76968727fdb1fbb
SHA512

419367f9b0a258c4f7488823a5753984b4a9f0d915c761026d8e495843b25d4d0d05f8e05e1e8d2283028ec5bb778a15aefebbc13f76a6dc35e75078a32f4371
SSDEEP

6144:qEANM8T3bSLZIi5W1S1i9TB6K6LB2/gwT:qENGbSLZI0v1i9Tcw

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2740	2736	WerFault.exe	30

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 2644 wrote to memory of 2736	2644	rundll32.exe	30
PID 2644 wrote to memory of 2736	2644	rundll32.exe	30
PID 2644 wrote to memory of 2736	2644	rundll32.exe	30
PID 2644 wrote to memory of 2736	2644	rundll32.exe	30
PID 2644 wrote to memory of 2736	2644	rundll32.exe	30
PID 2644 wrote to memory of 2736	2644	rundll32.exe	30
PID 2644 wrote to memory of 2736	2644	rundll32.exe	30
PID 2736 wrote to memory of 2740	2736	rundll32.exe	31
PID 2736 wrote to memory of 2740	2736	rundll32.exe	31
PID 2736 wrote to memory of 2740	2736	rundll32.exe	31
PID 2736 wrote to memory of 2740	2736	rundll32.exe	31

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\$0\TCPDeliver.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2644
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\$0\TCPDeliver.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:2736
- - C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -u -p 2736 -s 244
    3⤵
    - Program crash
    PID:2740

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads