8b7948fe7a0eb413cddc58f75973c6cf148673a8786095601c0b71057c6ff14f

Analysis

max time kernel
46s
max time network
49s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
29/11/2022, 05:48

Target

8b7948fe7a0eb413cddc58f75973c6cf148673a8786095601c0b71057c6ff14f.dll
Size

84KB
MD5

883d838026fbe26792787636b77fc2a5
SHA1

cd45a2641a84d4872520bbb1df6addbec187e614
SHA256

8b7948fe7a0eb413cddc58f75973c6cf148673a8786095601c0b71057c6ff14f
SHA512

943fcf112a7154890338eef7708cc9a973d49510ec5a0c6976860e6cf7ba095ceab8f30aac8a6e80364b1b3ee313fc84e6e3029cd87073438bb8dc1f193d7330
SSDEEP

1536:JB0uvsyn0B7rFQiDkUVWCcZ0HdI5x+1AA0qeTiyjD8LxveyT4SE:Je8sthRQiDkqyZ0uD+D0qeTiaGxWyJE

Score

1^/10

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 1996 wrote to memory of 1364	1996	rundll32.exe	28
PID 1996 wrote to memory of 1364	1996	rundll32.exe	28
PID 1996 wrote to memory of 1364	1996	rundll32.exe	28
PID 1996 wrote to memory of 1364	1996	rundll32.exe	28
PID 1996 wrote to memory of 1364	1996	rundll32.exe	28
PID 1996 wrote to memory of 1364	1996	rundll32.exe	28
PID 1996 wrote to memory of 1364	1996	rundll32.exe	28

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\8b7948fe7a0eb413cddc58f75973c6cf148673a8786095601c0b71057c6ff14f.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:1996
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\8b7948fe7a0eb413cddc58f75973c6cf148673a8786095601c0b71057c6ff14f.dll,#1
  2⤵
  PID:1364

memory/1364-55-0x0000000075281000-0x0000000075283000-memory.dmp

Filesize
8KB

Download
memory/1364-56-0x00000000001E0000-0x00000000001ED000-memory.dmp

Filesize
52KB

Download
memory/1364-58-0x0000000010000000-0x000000001000C000-memory.dmp

Filesize
48KB

Download
memory/1364-61-0x00000000001E0000-0x00000000001ED000-memory.dmp

Filesize
52KB

Download
memory/1364-62-0x00000000001E0000-0x00000000001E6000-memory.dmp

Filesize
24KB

Download