Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240729-en
  • resource tags

    arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
  • submitted
    02-10-2024 09:28

General

  • Target

    HeraklesMT2Full17082013/HERAKLESMT2FULLPACK/msvcr100.dll

  • Size

    808KB

  • MD5

    aed6d63cfa5a3ef7021af9c457fee994

  • SHA1

    f6ad746ef520b03df6cf0f5a2512d0df964c4688

  • SHA256

    b4bfa27f677295b00a1df9a7e14db4b75cac2dd41b898d4e9a378eccce3699f0

  • SHA512

    5573b17eb19d13cc96df5d66ef60cc8ff98e1ac9d8582a870ed2befa28ee271fb41741a92aa703234150fceadf4a436d10b8a6518c1816d0c804eb1261650d2d

  • SSDEEP

    24576:C5e4L1vwTowTWqwVeeK7R/myyKgn9IrzOI:C5e4LfUWqAacn9Y

Score
1/10

Malware Config

Signatures

  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\HeraklesMT2Full17082013\HERAKLESMT2FULLPACK\msvcr100.dll,#1
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2716
    • C:\Windows\system32\WerFault.exe
      C:\Windows\system32\WerFault.exe -u -p 2716 -s 80
      2⤵
        PID:2732

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads