aee383148cf2de40a679f6e27f30c8e8303105b9339ee817a9e8e76a8a445fe0

Analysis

max time kernel
149s
max time network
168s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
01/12/2022, 19:30

Target

aee383148cf2de40a679f6e27f30c8e8303105b9339ee817a9e8e76a8a445fe0.dll
Size

49KB
MD5

80602f389d86b2b3c3dc000b4917e896
SHA1

21fd16e824514052904386b0a53218659f2ccff4
SHA256

aee383148cf2de40a679f6e27f30c8e8303105b9339ee817a9e8e76a8a445fe0
SHA512

5b1ff4a9eb5ce1f79f3f42065ef481902d31cd386289001dee90c02d43157dc2e52c849e5c8c65021b276ec21ed1fd88dc181a7e5b2874d6aa3ae7572822ddd7
SSDEEP

768:34ZIAkWfxcUiUDWKBAJgrcM7jz1XEtx5HMYfh/aP70u9GqRQFW/U:DAluQdA6PT1XEtx5sEhCz2oU

Score

5^/10

Drops file in System32 directory 2 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SysWOW64\husavibo.dll	rundll32.exe
File opened for modification	C:\Windows\SysWOW64\ligeyuvu	rundll32.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
4912	rundll32.exe
4912	rundll32.exe

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2120 wrote to memory of 4912	2120	rundll32.exe	80
PID 2120 wrote to memory of 4912	2120	rundll32.exe	80
PID 2120 wrote to memory of 4912	2120	rundll32.exe	80

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\aee383148cf2de40a679f6e27f30c8e8303105b9339ee817a9e8e76a8a445fe0.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2120
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\aee383148cf2de40a679f6e27f30c8e8303105b9339ee817a9e8e76a8a445fe0.dll,#1
  2⤵
  - Drops file in System32 directory
  - Suspicious use of SetWindowsHookEx
  PID:4912

memory/4912-133-0x0000000010000000-0x0000000010023000-memory.dmp

Filesize
140KB

Download
memory/4912-134-0x0000000010000000-0x0000000010023000-memory.dmp

Filesize
140KB

Download
memory/4912-135-0x0000000010000000-0x0000000010023000-memory.dmp

Filesize
140KB

Download