65b151357ed895cbf3382080aea700bd203dced75432dea7b765775db92a7565

Analysis

max time kernel
145s
max time network
53s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
01-12-2022 04:14

Target

65b151357ed895cbf3382080aea700bd203dced75432dea7b765775db92a7565.dll
Size

15KB
MD5

fcd33af3ec424e3aa975ea60fadfb0ec
SHA1

3c2a4924f1402e081fbbb327d0f8866459d59533
SHA256

65b151357ed895cbf3382080aea700bd203dced75432dea7b765775db92a7565
SHA512

7a6599beacfb72dab31bb60a836d38b86e5fe2398c31f467a6f3970c373500407969eb8e293da5afec08e52f113844105da348859838c86eefc9da3ef4f18558
SSDEEP

384:EpZ7eQr7eQHHDDzDGAzDDDzDGAzDDDzDGLqyi8TVRmtLcj4RENamoJlOwDLuMEE9:WH7jPHvPHvPzQRmVcjgYXo+IuMx9

Score

1^/10

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 1000 wrote to memory of 1696	1000	rundll32.exe	27
PID 1000 wrote to memory of 1696	1000	rundll32.exe	27
PID 1000 wrote to memory of 1696	1000	rundll32.exe	27
PID 1000 wrote to memory of 1696	1000	rundll32.exe	27
PID 1000 wrote to memory of 1696	1000	rundll32.exe	27
PID 1000 wrote to memory of 1696	1000	rundll32.exe	27
PID 1000 wrote to memory of 1696	1000	rundll32.exe	27

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\65b151357ed895cbf3382080aea700bd203dced75432dea7b765775db92a7565.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:1000
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\65b151357ed895cbf3382080aea700bd203dced75432dea7b765775db92a7565.dll,#1
  2⤵
  PID:1696

memory/1696-54-0x0000000000000000-mapping.dmp

Download
memory/1696-55-0x0000000075201000-0x0000000075203000-memory.dmp

Filesize
8KB

Download
memory/1696-56-0x0000000010000000-0x0000000010012000-memory.dmp

Filesize
72KB

Download
memory/1696-57-0x0000000010000000-0x0000000010012000-memory.dmp

Filesize
72KB

Download
memory/1696-58-0x0000000010000000-0x0000000010012000-memory.dmp

Filesize
72KB

Download
memory/1696-59-0x0000000010000000-0x0000000010012000-memory.dmp

Filesize
72KB

Download