c53ef46e891acab21127cab4c2479d87ab52f232630e26af3bbcaa616c7fa491

Analysis

max time kernel
42s
max time network
46s
platform
windows7_x64
resource
win7-20220718-en
resource tags

arch:x64arch:x86image:win7-20220718-enlocale:en-usos:windows7-x64system
submitted
19-07-2022 18:21

Target

c53ef46e891acab21127cab4c2479d87ab52f232630e26af3bbcaa616c7fa491.dll
Size

145KB
MD5

7c2ab92d6beabb21e040ecbf00b14eeb
SHA1

00c7e9faba283deaae743c962eacc3d177f7d1a4
SHA256

c53ef46e891acab21127cab4c2479d87ab52f232630e26af3bbcaa616c7fa491
SHA512

165414cbb47921f2ef1039a5a9e94fee4fc84f296ffc9d8de66c52f8b4e7d9449797249253b42844d1c671d99a56b1b518ffcebe5966e049d7f74d4407cb9bb9

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1548	896	WerFault.exe	28

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 1208 wrote to memory of 896	1208	rundll32.exe	28
PID 1208 wrote to memory of 896	1208	rundll32.exe	28
PID 1208 wrote to memory of 896	1208	rundll32.exe	28
PID 1208 wrote to memory of 896	1208	rundll32.exe	28
PID 1208 wrote to memory of 896	1208	rundll32.exe	28
PID 1208 wrote to memory of 896	1208	rundll32.exe	28
PID 1208 wrote to memory of 896	1208	rundll32.exe	28
PID 896 wrote to memory of 1548	896	rundll32.exe	29
PID 896 wrote to memory of 1548	896	rundll32.exe	29
PID 896 wrote to memory of 1548	896	rundll32.exe	29
PID 896 wrote to memory of 1548	896	rundll32.exe	29

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\c53ef46e891acab21127cab4c2479d87ab52f232630e26af3bbcaa616c7fa491.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:1208
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\c53ef46e891acab21127cab4c2479d87ab52f232630e26af3bbcaa616c7fa491.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:896
- - C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -u -p 896 -s 224
    3⤵
    - Program crash
    PID:1548

memory/896-55-0x00000000758D1000-0x00000000758D3000-memory.dmp

Filesize
8KB

Download