e60bc161066dabea97cea12bd8559fa64884c7486108c1d09f83d97b84ce4fb4

Analysis

max time kernel
16s
max time network
32s
platform
windows7_x64
resource
win7-20221111-en
resource tags

arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
submitted
25/11/2022, 19:14

Target

e60bc161066dabea97cea12bd8559fa64884c7486108c1d09f83d97b84ce4fb4.dll
Size

644KB
MD5

537d3a75e7ac3d7870449a9fd6587aed
SHA1

3a21481cdcd472ddb1d389ab4fc37272d10748da
SHA256

e60bc161066dabea97cea12bd8559fa64884c7486108c1d09f83d97b84ce4fb4
SHA512

f4d7aa579eecfda43377d1c295be554653acbc7335c1b056a32107d3ece6c5997869e4e1df98179a36be8b86a4d05e6c26b79a38dc8cc501464e2a5b031638ba
SSDEEP

12288:N6mj/bV8sxIW8USgfNpfrBjzLXwb5IfcJp8Mi/9LgBRIK5/:cmzhpxItLgfvBEI0kMi1LgBRbV

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
960	rundll32.exe

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 2040 wrote to memory of 960	2040	rundll32.exe	28
PID 2040 wrote to memory of 960	2040	rundll32.exe	28
PID 2040 wrote to memory of 960	2040	rundll32.exe	28
PID 2040 wrote to memory of 960	2040	rundll32.exe	28
PID 2040 wrote to memory of 960	2040	rundll32.exe	28
PID 2040 wrote to memory of 960	2040	rundll32.exe	28
PID 2040 wrote to memory of 960	2040	rundll32.exe	28

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\e60bc161066dabea97cea12bd8559fa64884c7486108c1d09f83d97b84ce4fb4.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2040
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\e60bc161066dabea97cea12bd8559fa64884c7486108c1d09f83d97b84ce4fb4.dll,#1
  2⤵
  - Suspicious use of SetWindowsHookEx
  PID:960

memory/960-55-0x0000000075591000-0x0000000075593000-memory.dmp

Filesize
8KB

Download
memory/960-56-0x0000000010000000-0x0000000010324000-memory.dmp

Filesize
3.1MB

Download
memory/960-58-0x0000000010000000-0x0000000010324000-memory.dmp

Filesize
3.1MB

Download
memory/960-59-0x0000000010000000-0x0000000010324000-memory.dmp

Filesize
3.1MB

Download