7049fbb80e273a1d36f2ee2f86ae070d161083c222672a65168bc2dd871cc523 | Triage

Analysis

max time kernel
121s
max time network
123s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
21/07/2024, 15:54

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

IndyHelper.dll
Size

234KB
MD5

f8cf62c3ecb91e490965bd19ac4c5993
SHA1

6e63137a800314602149a079b68377f9c0c4e51b
SHA256

7049fbb80e273a1d36f2ee2f86ae070d161083c222672a65168bc2dd871cc523
SHA512

b179e48424312f3c1aab1c3d64fd05f7e0affcddda9db2db7701f0c0062e16bd83e7d1c57ddb7519bc6296b60711fae52777035fec5d9fc3598fb3ce72d7180f
SSDEEP

6144:vmJWVGr/49Pz8JoBrWZI53LAOwjMdet1M4:cAG749PUaLst1M4

Score

3^/10

Malware Config

Signatures

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2564	2104	WerFault.exe	30

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 2504 wrote to memory of 2104	2504	rundll32.exe	30
PID 2504 wrote to memory of 2104	2504	rundll32.exe	30
PID 2504 wrote to memory of 2104	2504	rundll32.exe	30
PID 2504 wrote to memory of 2104	2504	rundll32.exe	30
PID 2504 wrote to memory of 2104	2504	rundll32.exe	30
PID 2504 wrote to memory of 2104	2504	rundll32.exe	30
PID 2504 wrote to memory of 2104	2504	rundll32.exe	30
PID 2104 wrote to memory of 2564	2104	rundll32.exe	31
PID 2104 wrote to memory of 2564	2104	rundll32.exe	31
PID 2104 wrote to memory of 2564	2104	rundll32.exe	31
PID 2104 wrote to memory of 2564	2104	rundll32.exe	31

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\IndyHelper.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2504
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\IndyHelper.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:2104
- - C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -u -p 2104 -s 220
    3⤵
    - Program crash
    PID:2564

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads