caf02bd60f22e21c83cff2bf1e512860db24239849c02e409934393c06d8a459

Analysis

max time kernel
108s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
11/10/2022, 10:01

Target

caf02bd60f22e21c83cff2bf1e512860db24239849c02e409934393c06d8a459.dll
Size

4KB
MD5

1517723720ffe5e7ebae982b99e3a6c0
SHA1

377d37a0f50d3a09055ebb4d6f298cc950b1606a
SHA256

caf02bd60f22e21c83cff2bf1e512860db24239849c02e409934393c06d8a459
SHA512

4a195e3bb42af9333a9eb5157ef11eae927d1c6baffd67ed54dfb554b4910f2b3d916f418b921edb8071f7bf987801a821d1ad0e82826908de211c305f6f3649
SSDEEP

48:a5zjMTGcITBVQVE1lcvgtiyccyzaf7KbPCcJRpJKv:iT3Qu8vQN8o7w6UhKv

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 984 wrote to memory of 2192	984	rundll32.exe	82
PID 984 wrote to memory of 2192	984	rundll32.exe	82
PID 984 wrote to memory of 2192	984	rundll32.exe	82

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\caf02bd60f22e21c83cff2bf1e512860db24239849c02e409934393c06d8a459.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:984
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\caf02bd60f22e21c83cff2bf1e512860db24239849c02e409934393c06d8a459.dll,#1
  2⤵
  PID:2192