Resubmissions

27/10/2024, 16:36 UTC

241027-t4cgaazgqn 7

19/10/2024, 00:17 UTC

241019-ak9swsxfrr 7

30/09/2024, 17:27 UTC

240930-v1devaxbll 7

30/09/2024, 17:00 UTC

240930-vh8g9szdqg 7

30/09/2024, 16:44 UTC

240930-t8tlcsvgjk 7

29/09/2024, 17:22 UTC

240929-vxj38awgng 7

29/09/2024, 16:13 UTC

240929-tn9rvavalh 7

29/09/2024, 01:09 UTC

240929-bhyhhsterq 7

Analysis

  • max time kernel
    119s
  • max time network
    131s
  • platform
    windows7_x64
  • resource
    win7-20241010-en
  • resource tags

    arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
  • submitted
    27/10/2024, 16:36 UTC

General

  • Target

    COMDLG32.dll

  • Size

    137KB

  • MD5

    d76f0eab36f83a31d411aeaf70da7396

  • SHA1

    9bc145b54500fb6fbea9be61fbdd90f65fd1bc14

  • SHA256

    46f4fdb12c30742ff4607876d2f36cf432cdc7ec3d2c99097011448fc57e997c

  • SHA512

    9c22bc6b2e7dbcd344809085894b768cfa76e8512062c5bbf3caeaa2771c6b7ce128bd5a0b6e385a5da777d0d822a5b2191773cc0ddb05abe1fa935fa853d79d

  • SSDEEP

    3072:VESIiWD8uq4hCqUt6mqD1gRshBgH/voqJrwo2CocrJbQN6N2TRqEydzXS0:VETz566VgRyOJ0oDxQRHf

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious use of WriteProcessMemory 7 IoCs

Processes

  • C:\Windows\system32\regsvr32.exe
    regsvr32 /s C:\Users\Admin\AppData\Local\Temp\COMDLG32.dll
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2400
    • C:\Windows\SysWOW64\regsvr32.exe
      /s C:\Users\Admin\AppData\Local\Temp\COMDLG32.dll
      2⤵
      • System Location Discovery: System Language Discovery
      PID:2580

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.