7a39caf04d025428d5d9e5098fef74e22f59eee2c3686f676e235ae954b18b6d | Triage

Resubmissions

10-02-2025 02:06

250210-cjg3laykgq 10

10-02-2025 02:04

250210-chg17syrby 10

Analysis

max time kernel
118s
max time network
120s
platform
windows7_x64
resource
win7-20241010-en
resource tags

arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
submitted
10-02-2025 02:06

Sharing

Report Analysis Logs

General

Target

icudt68.dll
Size

19KB
MD5

994a66f27812c53d3f5bd8336b4a2aa4
SHA1

e4575dd22d14cd9704d0b34d2d0ddeac54c90637
SHA256

ce1ba6d19bd4842fb54daf9d929208b3840ec98e3a135bd89008dd9312f03894
SHA512

d2ecf75afc628026e0f10cd58869cfe8b7dd85e401b544a9e5b0a3a26e5518883b3d5bd03160301b4d927f20b983b403fd514a7c7762b70ba19c9feb9258f3f7
SSDEEP

192:tSU/lU0TBZHh0Fg2kAdGlYqufZnixMa4bbP0Fg2kAdGlYqufZnltBZHVd:VtVhh0cTGfZSMPj0cTGfZ1hX

Score

1^/10

Malware Config

Signatures

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2708 wrote to memory of 1948	2708	rundll32.exe	30
PID 2708 wrote to memory of 1948	2708	rundll32.exe	30
PID 2708 wrote to memory of 1948	2708	rundll32.exe	30

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\icudt68.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2708
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2708 -s 80
  2⤵
  PID:1948

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads