Analysis
-
max time kernel
3s -
platform
windows11-21h2_x64 -
resource
win11-20240704-en -
resource tags
-
submitted
05-07-2024 04:32
General
-
Target
newdcnyash/data/NCC3.dll
-
Size
72KB
-
MD5
aa84f91edd922e7b3bb979e663c94f1a
-
SHA1
da46b9962a6c6cceef38c3e11b8b5bc9c1b536fa
-
SHA256
38274608d5a4b53ec22f8099f798ba46ce0ed41db65a33dfb3853f0dbf849f6f
-
SHA512
88392fc77a0300ece306908867be38011530d9eefdf003452ba86d82f2fa4a61c2b27a199f376ac307c095beaa4f52cefcab59c8b28fa187c0bca13f55f2d98b
-
SSDEEP
1536:a44UF/3qab79HtYDAD5MPEBq9iNv6qfSOBHfVW:a44G3fRMPiuuv6qqOBHfVW
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\newdcnyash\data\NCC3.dll,#11⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\newdcnyash\data\NCC3.dll,#12⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1572 -s 4523⤵
- Program crash
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 204 -p 1572 -ip 15721⤵