7a2683840274bac37c4d8d2227a585d1ceb5b86f2a5c621aea5109ce736b3918

Analysis

max time kernel
41s
max time network
49s
platform
windows7_x64
resource
win7-20220901-en
resource tags

arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
submitted
14-10-2022 05:57

Target

171ec48cec3496c382bb8c683a816fcc.dll
Size

2.7MB
MD5

171ec48cec3496c382bb8c683a816fcc
SHA1

ae9eaac968470efa6d3af3c5872842fa18049b96
SHA256

7a2683840274bac37c4d8d2227a585d1ceb5b86f2a5c621aea5109ce736b3918
SHA512

d94b8ffd706217d86291f48b4207506e4e1b4c2818be17584d6cb453d1732330f71baf98152896c769e87ff19fdb2f1ef8a9d00637ce24c90e006bfffe6c7d23
SSDEEP

49152:Jzl1rpbUrqvv0v2rQVt8nqwI7lOOYcZ2ek:P1Kqvv07noI7lOOYcr

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2012	1928	WerFault.exe	27

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 1048 wrote to memory of 1928	1048	rundll32.exe	27
PID 1048 wrote to memory of 1928	1048	rundll32.exe	27
PID 1048 wrote to memory of 1928	1048	rundll32.exe	27
PID 1048 wrote to memory of 1928	1048	rundll32.exe	27
PID 1048 wrote to memory of 1928	1048	rundll32.exe	27
PID 1048 wrote to memory of 1928	1048	rundll32.exe	27
PID 1048 wrote to memory of 1928	1048	rundll32.exe	27
PID 1928 wrote to memory of 2012	1928	rundll32.exe	28
PID 1928 wrote to memory of 2012	1928	rundll32.exe	28
PID 1928 wrote to memory of 2012	1928	rundll32.exe	28
PID 1928 wrote to memory of 2012	1928	rundll32.exe	28

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\171ec48cec3496c382bb8c683a816fcc.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:1048
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\171ec48cec3496c382bb8c683a816fcc.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:1928
- - C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -u -p 1928 -s 196
    3⤵
    - Program crash
    PID:2012

memory/1928-55-0x00000000759F1000-0x00000000759F3000-memory.dmp

Filesize
8KB

Download