DllRegisterServer
General
-
Target
3d365a73eaa676b9ea64a5e3f2eb0130ab09ff35087f626f45ae8233aebf4c24
-
Size
202KB
-
MD5
f78e6aef4f74925687de393667395496
-
SHA1
239f35629a9b9aba485516c5794c77cfdce91905
-
SHA256
3d365a73eaa676b9ea64a5e3f2eb0130ab09ff35087f626f45ae8233aebf4c24
-
SHA512
dfc0c60915ab685cd29fecfadd6144dd8dfb7ce859d264245ea5f6738c885e79bc3d2f74e90dac2541c3332a878530eca0474a8291181c9fa93e3ba89118aa14
-
SSDEEP
3072:KYKsu1WnjLYkFCLtMINbdsMa1AEPM6Us5vd+3XvhNA1xpCBongHx2M/SC7ZKPx:ndu1ICLtMSC12OdK/kppngRiC7ZKJ
Score
10/10
Malware Config
Signatures
-
Trickbot family
-
Templ.dll packer 1 IoCs
Detects Templ.dll packer which usually loads Trickbot.
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
3d365a73eaa676b9ea64a5e3f2eb0130ab09ff35087f626f45ae8233aebf4c24
25d7ed1fe103d0dc82fc8e01a61c788e
Headers
Imports
Exports
Sections