d815d01a04d171be3ae31f2cfe972f4da3aa7323e25cf1d4f891cbc2f16d228c

Analysis

max time kernel
31s
max time network
34s
platform
windows7_x64
resource
win7-20221111-en
resource tags

arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
submitted
23-11-2022 21:13

Target

d815d01a04d171be3ae31f2cfe972f4da3aa7323e25cf1d4f891cbc2f16d228c.dll
Size

39KB
MD5

3b82d869348731c2b222a46cff504620
SHA1

cc9e11f672260ef9c984dfbd009e879efe3cb78b
SHA256

d815d01a04d171be3ae31f2cfe972f4da3aa7323e25cf1d4f891cbc2f16d228c
SHA512

8fcfcdddd6e839fea062f0c4795d3bf716b4db7a79e9273d2df8b06a0346c80029605c3e3cbad42bd9f3fa75d9c9fbb8b44b8affd7933a8dc562d6d5336e8c6d
SSDEEP

768:sZFYIemfgfj15+YwGdL19+mm+RjXJhwZGSV24:s3xf01MoL19woX7w8SV24

Score

1^/10

Suspicious use of WriteProcessMemory 7 IoCs

Processes:

rundll32.exe

description	pid	process	target process
PID 612 wrote to memory of 1776	612	rundll32.exe	rundll32.exe
PID 612 wrote to memory of 1776	612	rundll32.exe	rundll32.exe
PID 612 wrote to memory of 1776	612	rundll32.exe	rundll32.exe
PID 612 wrote to memory of 1776	612	rundll32.exe	rundll32.exe
PID 612 wrote to memory of 1776	612	rundll32.exe	rundll32.exe
PID 612 wrote to memory of 1776	612	rundll32.exe	rundll32.exe
PID 612 wrote to memory of 1776	612	rundll32.exe	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\d815d01a04d171be3ae31f2cfe972f4da3aa7323e25cf1d4f891cbc2f16d228c.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:612

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\d815d01a04d171be3ae31f2cfe972f4da3aa7323e25cf1d4f891cbc2f16d228c.dll,#1
2⤵
PID:1776

memory/1776-54-0x0000000000000000-mapping.dmp

Download
memory/1776-55-0x0000000075011000-0x0000000075013000-memory.dmp

Filesize
8KB

Download
memory/1776-56-0x0000000000100000-0x000000000010A000-memory.dmp

Filesize
40KB

Download
memory/1776-57-0x0000000000100000-0x000000000010A000-memory.dmp

Filesize
40KB

Download
memory/1776-58-0x00000000001C0000-0x00000000001C6000-memory.dmp

Filesize
24KB

Download