36050d1e9f99cb4cd21ad683d222dbb5d62ddff5203c7d8f53e1fbb787408e20

Analysis

max time kernel
40s
max time network
46s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
11-10-2022 04:22

Target

36050d1e9f99cb4cd21ad683d222dbb5d62ddff5203c7d8f53e1fbb787408e20.dll
Size

56KB
MD5

608e7772e11e02663255b9f6f1e1edfa
SHA1

86ab199ac86ac93f280fbf0559c5ab17f83f3e0e
SHA256

36050d1e9f99cb4cd21ad683d222dbb5d62ddff5203c7d8f53e1fbb787408e20
SHA512

ca5925db007759285cd0970be66f8041bb34ce68fdb024cafa1e9b33f1ca324a94f6486329a46a400dc7c34d233c73b7f2f83a1680740c54df775298e0a316e3
SSDEEP

1536:g2NNyGkHjkDzELujcBLbbQjw4hZAZc0e8:guAGWIz8YcJbbQjw4hiqo

Score

1^/10

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 704 wrote to memory of 1652	704	rundll32.exe	27
PID 704 wrote to memory of 1652	704	rundll32.exe	27
PID 704 wrote to memory of 1652	704	rundll32.exe	27
PID 704 wrote to memory of 1652	704	rundll32.exe	27
PID 704 wrote to memory of 1652	704	rundll32.exe	27
PID 704 wrote to memory of 1652	704	rundll32.exe	27
PID 704 wrote to memory of 1652	704	rundll32.exe	27

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\36050d1e9f99cb4cd21ad683d222dbb5d62ddff5203c7d8f53e1fbb787408e20.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:704
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\36050d1e9f99cb4cd21ad683d222dbb5d62ddff5203c7d8f53e1fbb787408e20.dll,#1
  2⤵
  PID:1652

memory/1652-54-0x0000000000000000-mapping.dmp

Download
memory/1652-55-0x0000000074AD1000-0x0000000074AD3000-memory.dmp

Filesize
8KB

Download
memory/1652-56-0x0000000010000000-0x000000001000D000-memory.dmp

Filesize
52KB

Download
memory/1652-57-0x0000000010000000-0x000000001000D000-memory.dmp

Filesize
52KB

Download
memory/1652-58-0x0000000010000000-0x000000001000D000-memory.dmp

Filesize
52KB

Download
memory/1652-59-0x0000000010000000-0x000000001000D000-memory.dmp

Filesize
52KB

Download