1a34bba303197eade878b483cd8b02c2bd6bd2af9d5ec501bc61b4b318704f0c | Triage

Analysis

max time kernel
15s
max time network
17s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
28/09/2024, 08:04

Sharing

Report Analysis Logs

General

Target

icudt44.dll
Size

14.2MB
MD5

45a743dc111dfd94b071be81eeb0910d
SHA1

5392ab467690b1f18422b294c5e2956363ab166c
SHA256

0579cd3f8a7c4584d4d1a22e9269ee2b53eeb2f3912b0bf22a969b2e3e180ab8
SHA512

557c88fe06cd65d1c5a69e594b6044d2764a7537da121d0f65776101e5520d71a38e7724844fe04dc78a83deb86c19a4515b27155ff6faf8de12973c53371794
SSDEEP

393216:klCE8Ja8J38JcqtVKmGS3WA0WTC12AZk:jEraX

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2360 wrote to memory of 2660	2360	rundll32.exe	30
PID 2360 wrote to memory of 2660	2360	rundll32.exe	30
PID 2360 wrote to memory of 2660	2360	rundll32.exe	30

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\icudt44.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2360
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2360 -s 80
  2⤵
  PID:2660

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads