a62336567025f15d3680206d9f4e176c123c79c5fe602fdf6af164f87762bba9 | Triage

Analysis

max time kernel
119s
max time network
126s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
09-01-2025 20:40

Sharing

Report Analysis Logs

General

Target

bin/icudt.dll
Size

9.5MB
MD5

045d0f4f41ca53d4cb22bdc814a22b64
SHA1

63e1df7559eda81c8c0869f7f2144f553f94dd03
SHA256

a20010e097e5a4ae7f7065da7b290cb535d1ef98a6a7cc299a343e26d688aa5d
SHA512

1792331728a0abd284d638ad5d29aaa71a5c34bde611f33fb416c7c0be5d9748c606e495f4dc40a880983a2ab9bb04f1406e26fe835df470b37c241e6b2007b5
SSDEEP

98304:oyIexx5hdtkqAYv7CagQZhzvilh2WhHa8807suLw03:oyIej5hdOqLCagQZhzvilh2Wkcbv

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2756 wrote to memory of 2776	2756	rundll32.exe	30
PID 2756 wrote to memory of 2776	2756	rundll32.exe	30
PID 2756 wrote to memory of 2776	2756	rundll32.exe	30

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\bin\icudt.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2756
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2756 -s 80
  2⤵
  PID:2776

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads