75fdc12f6a7feafd8de0f4106f84893a26f39e96a20479e7fab0581a204c3402

Analysis

max time kernel
28s
max time network
30s
platform
windows7_x64
resource
win7-20221111-en
resource tags

arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
submitted
28-11-2022 03:35

Target

75fdc12f6a7feafd8de0f4106f84893a26f39e96a20479e7fab0581a204c3402.dll
Size

361KB
MD5

42047a06a075b0c00fa6c9b6e31ca41c
SHA1

2649350c2f7f15fe0382335c50e900dbeafcd16f
SHA256

75fdc12f6a7feafd8de0f4106f84893a26f39e96a20479e7fab0581a204c3402
SHA512

cda9f6d787c407cf4fdad489b5495b3608f3d40514a8626290d521553af8053d3974d8bd5fa3771c3bb41b9fda64c4cbb6da1acf94b192246ef764bb1a565141
SSDEEP

6144:owM3I4nEYm2WLZz9PGGISkraoIX4NRZLLd/BZpymJZBS+tSfEwv5wyQ:7kI4nJmRz9PGGjkrgoN9Ppymfkn

Score

1^/10

Suspicious use of WriteProcessMemory 7 IoCs

Processes:

rundll32.exe

description	pid	process	target process
PID 948 wrote to memory of 2024	948	rundll32.exe	rundll32.exe
PID 948 wrote to memory of 2024	948	rundll32.exe	rundll32.exe
PID 948 wrote to memory of 2024	948	rundll32.exe	rundll32.exe
PID 948 wrote to memory of 2024	948	rundll32.exe	rundll32.exe
PID 948 wrote to memory of 2024	948	rundll32.exe	rundll32.exe
PID 948 wrote to memory of 2024	948	rundll32.exe	rundll32.exe
PID 948 wrote to memory of 2024	948	rundll32.exe	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\75fdc12f6a7feafd8de0f4106f84893a26f39e96a20479e7fab0581a204c3402.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:948

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\75fdc12f6a7feafd8de0f4106f84893a26f39e96a20479e7fab0581a204c3402.dll,#1
2⤵
PID:2024

memory/2024-54-0x0000000000000000-mapping.dmp

Download
memory/2024-55-0x0000000075A31000-0x0000000075A33000-memory.dmp

Filesize
8KB

Download
memory/2024-56-0x0000000073E70000-0x0000000073ECE000-memory.dmp

Filesize
376KB

Download
memory/2024-57-0x0000000073E71000-0x0000000073EC6000-memory.dmp

Filesize
340KB

Download
memory/2024-58-0x0000000073E70000-0x0000000073ECE000-memory.dmp

Filesize
376KB

Download
memory/2024-59-0x0000000073E70000-0x0000000073ECE000-memory.dmp

Filesize
376KB

Download