Analysis
-
max time kernel
50s -
max time network
67s -
platform
windows10_x64 -
resource
win10-20220414-en -
submitted
27-05-2022 06:12
Static task
static1
Behavioral task
behavioral1
Sample
c65b7afb05ee2b2687e6280594019068c3d3829182dfe8604ce4adf2116cc46e.dll
Resource
win10-20220414-en
windows10_x64
0 signatures
0 seconds
General
-
Target
c65b7afb05ee2b2687e6280594019068c3d3829182dfe8604ce4adf2116cc46e.dll
-
Size
1.9MB
-
MD5
f67d08e8c02574cbc2f1122c53bfb976
-
SHA1
6522992957e7e4d074947cad63189f308a80fcf2
-
SHA256
c65b7afb05ee2b2687e6280594019068c3d3829182dfe8604ce4adf2116cc46e
-
SHA512
2e9d0a211d2b085514f181852fae6e7ca6aed4d29f396348bedb59c556e39621810a9a74671566a49e126ec73a60d0f781fa9085eb407df1eefd942c18853be5
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes:
rundll32.exedescription pid process target process PID 1964 wrote to memory of 3652 1964 rundll32.exe rundll32.exe PID 1964 wrote to memory of 3652 1964 rundll32.exe rundll32.exe PID 1964 wrote to memory of 3652 1964 rundll32.exe rundll32.exe
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\c65b7afb05ee2b2687e6280594019068c3d3829182dfe8604ce4adf2116cc46e.dll,#11⤵
- Suspicious use of WriteProcessMemory
PID:1964 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\c65b7afb05ee2b2687e6280594019068c3d3829182dfe8604ce4adf2116cc46e.dll,#12⤵PID:3652
-