f4cae133b0ce8370cd9736c9968dfd16cdafeb4dc3e022ef08792d7644781bd7

Analysis

max time kernel
143s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
03/10/2022, 02:24

Target

f4cae133b0ce8370cd9736c9968dfd16cdafeb4dc3e022ef08792d7644781bd7.dll
Size

7KB
MD5

ab25996f656bf12cb87f5224c69020cc
SHA1

4dca104043a3696a333e21dd1a302268fec36fce
SHA256

f4cae133b0ce8370cd9736c9968dfd16cdafeb4dc3e022ef08792d7644781bd7
SHA512

fbf32f02bc6e12629750db6e679009932baa0800bc339ce784973cba4943d363e9da2900a8930f7d6f5458f9d8e18183ecaca36c6dbc8d44e2b3ba325a2acb3c
SSDEEP

96:xspY4nwHuPN1rFCTCFuSXKlABTkxYw90lL6wMPyC3p9NdR4zk:YBCTXSXPT6+aq+

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 4548 wrote to memory of 4860	4548	rundll32.exe	83
PID 4548 wrote to memory of 4860	4548	rundll32.exe	83
PID 4548 wrote to memory of 4860	4548	rundll32.exe	83

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\f4cae133b0ce8370cd9736c9968dfd16cdafeb4dc3e022ef08792d7644781bd7.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:4548
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\f4cae133b0ce8370cd9736c9968dfd16cdafeb4dc3e022ef08792d7644781bd7.dll,#1
  2⤵
  PID:4860