22e5e140154faed42f81bd433716496734c2e4671846c74fa8456d58727a02ba

Analysis

max time kernel
40s
max time network
49s
platform
windows7_x64
resource
win7-20220901-en
resource tags

arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
submitted
07/11/2022, 17:08

Target

22e5e140154faed42f81bd433716496734c2e4671846c74fa8456d58727a02ba.dll
Size

320KB
MD5

02fbaf0e88a16838c8bec11d9594a30f
SHA1

7ab398968c6c5665954715d4003a2eb58ad86f3f
SHA256

22e5e140154faed42f81bd433716496734c2e4671846c74fa8456d58727a02ba
SHA512

159923ff907ad22edfcbef18e524074bb4c4fc3b7b0a9db067619d3c2faef2c3472ec2f98c1e1a052f0d8ea715bcddcf3e19d54c36d1a991d06e670a3b22c5b2
SSDEEP

6144:G8mEMylLml/QQKW0oqveOyhEr9geeNMPaZRupn+aZGVXpEqI2JX6gAy/AwD:G8mEzlfW0oAPsEc8B+XLEqIeX6gAy/z

Score

1^/10

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 1724 wrote to memory of 1624	1724	rundll32.exe	27
PID 1724 wrote to memory of 1624	1724	rundll32.exe	27
PID 1724 wrote to memory of 1624	1724	rundll32.exe	27
PID 1724 wrote to memory of 1624	1724	rundll32.exe	27
PID 1724 wrote to memory of 1624	1724	rundll32.exe	27
PID 1724 wrote to memory of 1624	1724	rundll32.exe	27
PID 1724 wrote to memory of 1624	1724	rundll32.exe	27

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\22e5e140154faed42f81bd433716496734c2e4671846c74fa8456d58727a02ba.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:1724
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\22e5e140154faed42f81bd433716496734c2e4671846c74fa8456d58727a02ba.dll,#1
  2⤵
  PID:1624

memory/1624-55-0x0000000075111000-0x0000000075113000-memory.dmp

Filesize
8KB

Download
memory/1624-56-0x00000000745F0000-0x0000000074644000-memory.dmp

Filesize
336KB

Download
memory/1624-57-0x0000000074590000-0x00000000745E4000-memory.dmp

Filesize
336KB

Download
memory/1624-58-0x00000000745F0000-0x0000000074644000-memory.dmp

Filesize
336KB

Download
memory/1624-59-0x0000000074590000-0x00000000745E4000-memory.dmp

Filesize
336KB

Download