Resubmissions

06-08-2024 11:22

240806-ng2vrs1hkf 10

06-08-2024 10:55

240806-m1enxaxdmk 7

06-08-2024 10:51

240806-mxymls1eje 3

06-08-2024 10:49

240806-mw4r8sxcnj 10

Analysis

  • max time kernel
    12s
  • max time network
    19s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    06-08-2024 10:49

General

  • Target

    WebView2Loader.dll

  • Size

    157KB

  • MD5

    f4f005479885da634fd993c27da40fd3

  • SHA1

    f28bf0f09f1c4254c7a95f7cb9310e57662183d9

  • SHA256

    30b8f1f85ef1d6401172ae3d71eb767d57d40514b823f7b4f16cab7f153d35cb

  • SHA512

    fb24719738e19b3099b82d8131485df8066d4f2f8eca670e63a0154eb502b725f70a8ba68de87af3d77076730f1e8c83c157c47c2335d46e57f2dd0105c9da04

  • SSDEEP

    3072:FhU0B+bUXzlUPcGE91jkXmxyu1A14mRgP+NjJTIJEtcuVux4WXrbzQrZlhr:FKgjlUPBE9dGvW9mRUEtc+FSD+h

Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\WebView2Loader.dll,#1
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:1900
    • C:\Windows\system32\WerFault.exe
      C:\Windows\system32\WerFault.exe -u -p 1900 -s 172
      2⤵
        PID:2888

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads