bd22713bd62ca84da96dde0829cb3b134357730240ca4b8c67dbbea3bb300e9a

Analysis

max time kernel
138s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
19-09-2022 19:37

Target

bd22713bd62ca84da96dde0829cb3b134357730240ca4b8c67dbbea3bb300e9a.dll
Size

58KB
MD5

3fe5fceb0b55eff1352a7cde2f9a9d2a
SHA1

29d616a43d7c00106933c8d86f9c6737bc8f859e
SHA256

bd22713bd62ca84da96dde0829cb3b134357730240ca4b8c67dbbea3bb300e9a
SHA512

4d560f416980ca383a18a3e7d0757c614226fa0fb60b077b0d2a022cd8431195433adf1d14272a912942a82beabde92126601165f058628b9b452bd950361f05
SSDEEP

1536:5v2hf5FUY/DSlj1noxJ9hZ+z2Hj6eh1xxWQV:BifD/DS8jzq2Hj6eh1rD

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1352 wrote to memory of 1792	1352	rundll32.exe	14
PID 1352 wrote to memory of 1792	1352	rundll32.exe	14
PID 1352 wrote to memory of 1792	1352	rundll32.exe	14

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\bd22713bd62ca84da96dde0829cb3b134357730240ca4b8c67dbbea3bb300e9a.dll,#1
1⤵
PID:1792

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\bd22713bd62ca84da96dde0829cb3b134357730240ca4b8c67dbbea3bb300e9a.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:1352