d04025f3da16436a689232dbf1603d189e93b7bf6fb838be9b81ebc06e49d77e

Analysis

max time kernel
24s
max time network
46s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
02/10/2022, 01:16

Target

d04025f3da16436a689232dbf1603d189e93b7bf6fb838be9b81ebc06e49d77e.dll
Size

159KB
MD5

70fe2eb5716d3549242e61b4cc1f19b3
SHA1

d98d78fbb8d1881f361750555a390f4cf65f14c6
SHA256

d04025f3da16436a689232dbf1603d189e93b7bf6fb838be9b81ebc06e49d77e
SHA512

6dc38c8a5fb046c3c35ea97c1f3e0b7e41c3307e230ce59c7944e089ce760b2bb172ce93304e17180618ace77792b648aee29f08600c8d34d39081d60d8b31b2
SSDEEP

3072:BTQ/iXjoSGkAbNRXtqL4OOyveIn0C2cJaJFs0r9gkJKqDm+TAnBRjvt:BTSvBZkL4OB0C2ckJ4f+iBRjv

Score

1^/10

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 1896 wrote to memory of 2012	1896	rundll32.exe	28
PID 1896 wrote to memory of 2012	1896	rundll32.exe	28
PID 1896 wrote to memory of 2012	1896	rundll32.exe	28
PID 1896 wrote to memory of 2012	1896	rundll32.exe	28
PID 1896 wrote to memory of 2012	1896	rundll32.exe	28
PID 1896 wrote to memory of 2012	1896	rundll32.exe	28
PID 1896 wrote to memory of 2012	1896	rundll32.exe	28

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\d04025f3da16436a689232dbf1603d189e93b7bf6fb838be9b81ebc06e49d77e.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:1896
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\d04025f3da16436a689232dbf1603d189e93b7bf6fb838be9b81ebc06e49d77e.dll,#1
  2⤵
  PID:2012

memory/2012-55-0x00000000763F1000-0x00000000763F3000-memory.dmp

Filesize
8KB

Download
memory/2012-56-0x0000000010000000-0x0000000010016000-memory.dmp

Filesize
88KB

Download
memory/2012-57-0x0000000010000000-0x0000000010016000-memory.dmp

Filesize
88KB

Download
memory/2012-58-0x0000000010000000-0x0000000010016000-memory.dmp

Filesize
88KB

Download
memory/2012-59-0x0000000040960000-0x0000000040971000-memory.dmp

Filesize
68KB

Download