36a3d017612e3f4eea2603b1ccba747abc0c212d0908ac44894e4d649b0ff600

Analysis

max time kernel
40s
max time network
43s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
14/10/2022, 20:38

Target

36a3d017612e3f4eea2603b1ccba747abc0c212d0908ac44894e4d649b0ff600.dll
Size

2.1MB
MD5

dc79e1fa4549f16e4e0e85b362b04bde
SHA1

9b91e293df03ca5a6b2d9dee7eaeab1a3df91338
SHA256

36a3d017612e3f4eea2603b1ccba747abc0c212d0908ac44894e4d649b0ff600
SHA512

c977d59a18ca2feab1c2c033bf059aaa671a4dc3c2e0ba262cc7d2c55857ecf5ae583c19c23db474fb48cbd608ca78033d8a828f4b16051aeebf37106657bfd3
SSDEEP

24576:lVi6WQtu6BCXhhmUXq95pskyxQ0eRtmUWa7SuTjaNfnqydr3tq4xQi9UeIg2Gr2+:lqlXKwxQErO3TqfTWnvOGyLarRGpRfH

Score

5^/10

Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs

pid	Process
1856	rundll32.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1856	rundll32.exe

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 1476 wrote to memory of 1856	1476	rundll32.exe	27
PID 1476 wrote to memory of 1856	1476	rundll32.exe	27
PID 1476 wrote to memory of 1856	1476	rundll32.exe	27
PID 1476 wrote to memory of 1856	1476	rundll32.exe	27
PID 1476 wrote to memory of 1856	1476	rundll32.exe	27
PID 1476 wrote to memory of 1856	1476	rundll32.exe	27
PID 1476 wrote to memory of 1856	1476	rundll32.exe	27

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\36a3d017612e3f4eea2603b1ccba747abc0c212d0908ac44894e4d649b0ff600.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:1476
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\36a3d017612e3f4eea2603b1ccba747abc0c212d0908ac44894e4d649b0ff600.dll,#1
  2⤵
  - Suspicious use of NtSetInformationThreadHideFromDebugger
  - Suspicious use of SetWindowsHookEx
  PID:1856

memory/1856-55-0x0000000075E51000-0x0000000075E53000-memory.dmp

Filesize
8KB

Download
memory/1856-56-0x0000000010000000-0x000000001021F000-memory.dmp

Filesize
2.1MB

Download