38d14022ea33d23f03f55fc8b3bf51487845150af67490e050bd4c7e2fd3e516

Analysis

max time kernel
148s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
07/11/2022, 16:44

Target

38d14022ea33d23f03f55fc8b3bf51487845150af67490e050bd4c7e2fd3e516.dll
Size

56KB
MD5

0fedfc26f9b6101d3911fedc4e363f02
SHA1

550a963881b71d5f31c5fdc38d9ddd4a0de0eabf
SHA256

38d14022ea33d23f03f55fc8b3bf51487845150af67490e050bd4c7e2fd3e516
SHA512

fe2a0cc9b24a444f8fa2c6d585b50382ec2037091b341fdf4b2325eeb5c52abe509e99acb40cf552647ab1e51d31f499aa384a18433f1113d5ef6891e01014bb
SSDEEP

1536:73j7XgjacxdlJjtLv2oZgWPOKQPpf51CXiQy6:Lj7wj9llhZNOfpf51UiQ

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 4112 wrote to memory of 2688	4112	rundll32.exe	78
PID 4112 wrote to memory of 2688	4112	rundll32.exe	78
PID 4112 wrote to memory of 2688	4112	rundll32.exe	78

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\38d14022ea33d23f03f55fc8b3bf51487845150af67490e050bd4c7e2fd3e516.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:4112
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\38d14022ea33d23f03f55fc8b3bf51487845150af67490e050bd4c7e2fd3e516.dll,#1
  2⤵
  PID:2688