aeb4137557dcf2fa7f8099cb951bf32275724e88e2843f755472e70d1f56fe93

Analysis

max time kernel
41s
max time network
35s
platform
windows7_x64
resource
win7-20221111-en
resource tags

arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
submitted
24-11-2022 20:46

Target

aeb4137557dcf2fa7f8099cb951bf32275724e88e2843f755472e70d1f56fe93.dll
Size

600KB
MD5

7185b0e4ac161d0d94289a44ca0f81eb
SHA1

bee3c616aa1e0df5dcbb62228bc264a76a5b234a
SHA256

aeb4137557dcf2fa7f8099cb951bf32275724e88e2843f755472e70d1f56fe93
SHA512

b214b5a4bb47a3bfd665cf41b89d355371d6830b63f2df78684969e90ad5a5fce409e68d00840aeaace1c515c00d9663c73a718b6f430934813cf40dd4474588
SSDEEP

12288:x+H/dqZTl0CuHkYU0mMSsSktmxkw9xh1k04MD96mxKl:Q1quHkYbS+mxkw9xSMDlKl

Score

1^/10

Suspicious use of WriteProcessMemory 7 IoCs

Processes:

rundll32.exe

description	pid	process	target process
PID 1476 wrote to memory of 952	1476	rundll32.exe	rundll32.exe
PID 1476 wrote to memory of 952	1476	rundll32.exe	rundll32.exe
PID 1476 wrote to memory of 952	1476	rundll32.exe	rundll32.exe
PID 1476 wrote to memory of 952	1476	rundll32.exe	rundll32.exe
PID 1476 wrote to memory of 952	1476	rundll32.exe	rundll32.exe
PID 1476 wrote to memory of 952	1476	rundll32.exe	rundll32.exe
PID 1476 wrote to memory of 952	1476	rundll32.exe	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\aeb4137557dcf2fa7f8099cb951bf32275724e88e2843f755472e70d1f56fe93.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:1476

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\aeb4137557dcf2fa7f8099cb951bf32275724e88e2843f755472e70d1f56fe93.dll,#1
2⤵
PID:952

memory/952-54-0x0000000000000000-mapping.dmp

Download
memory/952-55-0x00000000757E1000-0x00000000757E3000-memory.dmp

Filesize
8KB

Download
memory/952-56-0x0000000000820000-0x00000000008B9000-memory.dmp

Filesize
612KB

Download
memory/952-60-0x00000000001F0000-0x000000000026E000-memory.dmp

Filesize
504KB

Download
memory/952-61-0x0000000000820000-0x00000000008B9000-memory.dmp

Filesize
612KB

Download
memory/952-62-0x000000006FFF0000-0x0000000070000000-memory.dmp

Filesize
64KB

Download