b00a57ec224ef5a14a1bace39ce2e3fbca97de17400a1b6fefb92bd3cc715152

Analysis

max time kernel
272s
max time network
327s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
25/11/2022, 21:50

Target

X86/6_ 0_ 0_ 4/JVSDK.dll
Size

60KB
MD5

5a9e67d430a8bb6a7fa9f4dc0860b655
SHA1

33d6d2f0ccb4bf82afcccd7fa0b7a69dc1526670
SHA256

ada0a586036272bd3006a3235ae8d9731c3fdf8259a7b8183fe92af3897b7d77
SHA512

240c4bdd8d329feb3530479d58c69cec17d26ecae84bc8238bb08c1065749812bbbfb62458d3d9bb56e1c5d29d43a119a1bec9294f836d889cdefe41725473a0
SSDEEP

768:09cjvq+g+Wbc3Spcow6w8iVvT0TNAI+VYMNC1wNDqJ+jTEGqKbmb1:0OrR3Spcow6wMTNAI+YqNDqkjdq0S1

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 4244 wrote to memory of 3440	4244	rundll32.exe	82
PID 4244 wrote to memory of 3440	4244	rundll32.exe	82
PID 4244 wrote to memory of 3440	4244	rundll32.exe	82

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\X86\6_ 0_ 0_ 4\JVSDK.dll",#1
1⤵
- Suspicious use of WriteProcessMemory
PID:4244
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe "C:\Users\Admin\AppData\Local\Temp\X86\6_ 0_ 0_ 4\JVSDK.dll",#1
  2⤵
  PID:3440