927b878fda36c73049ddfca7073e884b632415fd5a528af9a33d4e6a1e3246ea

Analysis

max time kernel
151s
max time network
157s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
23-11-2022 13:39

Target

927b878fda36c73049ddfca7073e884b632415fd5a528af9a33d4e6a1e3246ea.dll
Size

55KB
MD5

f99b45430b9f6fa0353a005e32cba307
SHA1

e495483887413c5bca5acfdef54b3b19ddc8a898
SHA256

927b878fda36c73049ddfca7073e884b632415fd5a528af9a33d4e6a1e3246ea
SHA512

8de0c85a139f2aa268ca2b78e120828c50ad4c6e273ba84836f8a5924ae3531c724ec57fc3c5ab6b9a10460c0d824c2c4335c6ffd4265303e49ea45b97217111
SSDEEP

768:daUeOCYq8/KfC5efalsxKEpqKYF/hu+8D3klhv+92veLRme6:IuCN4Ka5efaSxKEwKAJud0b+9LRS

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

Processes:

rundll32.exe

description	pid	process	target process
PID 4576 wrote to memory of 3216	4576	rundll32.exe	rundll32.exe
PID 4576 wrote to memory of 3216	4576	rundll32.exe	rundll32.exe
PID 4576 wrote to memory of 3216	4576	rundll32.exe	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\927b878fda36c73049ddfca7073e884b632415fd5a528af9a33d4e6a1e3246ea.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:4576

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\927b878fda36c73049ddfca7073e884b632415fd5a528af9a33d4e6a1e3246ea.dll,#1
2⤵
PID:3216

memory/3216-132-0x0000000000000000-mapping.dmp

Download
memory/3216-133-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download
memory/3216-134-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download
memory/3216-135-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download
memory/3216-136-0x0000000002550000-0x0000000002564000-memory.dmp

Filesize
80KB

Download
memory/3216-137-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download
memory/3216-138-0x0000000002550000-0x0000000002564000-memory.dmp

Filesize
80KB

Download