78c94a30cfad510f1c67d3ecf10efb6a150122c85ed5909ff4fe385b116f26dd

Analysis

max time kernel
11s
max time network
34s
platform
windows7_x64
resource
win7-20221111-en
resource tags

arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
submitted
23-11-2022 17:17

Target

78c94a30cfad510f1c67d3ecf10efb6a150122c85ed5909ff4fe385b116f26dd.dll
Size

87KB
MD5

05d4032d0c795fe8f51806ecedf1d0f2
SHA1

5aa71820ffaf9c01720f27175879570434100af0
SHA256

78c94a30cfad510f1c67d3ecf10efb6a150122c85ed5909ff4fe385b116f26dd
SHA512

9cd45d96b8a102dfaeb72d6b007eb82ba9fb8c09ee93feae67f163bdf59f9567bb78a6c7f76fb51363221a3b02d568c4c21ad0046c9a038aef356b3386ab4c5d
SSDEEP

1536:ynVi0pQ2gpdThNVoP7cRTLOxBO8+JXkFjwjiN4/nMWrK:ynz5gpzNKPUf/JXkFjo/MV

Score

1^/10

Suspicious use of WriteProcessMemory 7 IoCs

Processes:

rundll32.exe

description	pid	process	target process
PID 1228 wrote to memory of 940	1228	rundll32.exe	rundll32.exe
PID 1228 wrote to memory of 940	1228	rundll32.exe	rundll32.exe
PID 1228 wrote to memory of 940	1228	rundll32.exe	rundll32.exe
PID 1228 wrote to memory of 940	1228	rundll32.exe	rundll32.exe
PID 1228 wrote to memory of 940	1228	rundll32.exe	rundll32.exe
PID 1228 wrote to memory of 940	1228	rundll32.exe	rundll32.exe
PID 1228 wrote to memory of 940	1228	rundll32.exe	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\78c94a30cfad510f1c67d3ecf10efb6a150122c85ed5909ff4fe385b116f26dd.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:1228

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\78c94a30cfad510f1c67d3ecf10efb6a150122c85ed5909ff4fe385b116f26dd.dll,#1
2⤵
PID:940

memory/940-54-0x0000000000000000-mapping.dmp

Download
memory/940-55-0x00000000760A1000-0x00000000760A3000-memory.dmp

Filesize
8KB

Download
memory/940-56-0x0000000010000000-0x0000000010025000-memory.dmp

Filesize
148KB

Download
memory/940-57-0x0000000010000000-0x0000000010025000-memory.dmp

Filesize
148KB

Download
memory/940-58-0x0000000000120000-0x0000000000125000-memory.dmp

Filesize
20KB

Download