Analysis
-
max time kernel
3s -
platform
windows11-21h2_x64 -
resource
win11-20240704-en -
resource tags
-
submitted
05-07-2024 04:32
General
-
Target
newdcnyash/data/7zxa.dll
-
Size
160KB
-
MD5
c6c778752b11c3e443c97c55e60720e8
-
SHA1
57b29fb5760885e1594a5e97eccf18017cbbf604
-
SHA256
863f6bf4f51e08a4604a4e175781b35c251bb204f479eac58af0db11c7f019a2
-
SHA512
8ef6ea70f0b3ff65ef2cac3668487f1fc121fdb945d10919db187e95ad22e5098b5357fbfa77caee5ce2394fa707c8c79e80703aad9937a93d8cf9a5a46a413c
-
SSDEEP
3072:7fGomNy4JTVoXxLYxNJeINgQnK2W2KQy4fClGZMQ06+V8+NB1RkFIEu3LB:GZnMWg0y4fk6+VLB1RbE6
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\newdcnyash\data\7zxa.dll,#11⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\newdcnyash\data\7zxa.dll,#12⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1084 -s 4483⤵
- Program crash
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 1084 -ip 10841⤵