Analysis
-
max time kernel
119s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
14-12-2024 17:29
Static task
static1
Behavioral task
behavioral1
Sample
Unborn Loader.rar
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
Unborn Loader.rar
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
Unborn Loader.exe
Resource
win7-20241010-en
Behavioral task
behavioral4
Sample
Unborn Loader.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
d3dx9_39.dll
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
d3dx9_39.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
msvcp140.dll
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
msvcp140.dll
Resource
win10v2004-20241007-en
General
-
Target
msvcp140.dll
-
Size
576KB
-
MD5
7b92a6cb5d2cad407c457ab12d2b211d
-
SHA1
e04020b3448fc6084fa31b7f791f22ff15e31328
-
SHA256
3c6a772319fff3ee56d4cedbe332bb5c0c2f394714cf473c6cdf933754114784
-
SHA512
b28740c1aca4f0f60a9e4a9ab5a0561af774d977ab6d42a7eea70c9e560c77c50be5d9d869f05d0435e2923f4f600219335d22425807ab23cbbcda75442c4b42
-
SSDEEP
12288:RI88L4Wu4+oJ+xc39ax5Ms4ETs3rxSvYcRvbQEKZm+jWodEEVhQ:RD89rxZCQEKZm+jWodEEPQ
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 2108 wrote to memory of 2388 2108 rundll32.exe 30 PID 2108 wrote to memory of 2388 2108 rundll32.exe 30 PID 2108 wrote to memory of 2388 2108 rundll32.exe 30