b944bcedbac923b06cde9d76962ec64dac7e81c88b7cd0c2d2b30ddff09023fd

Analysis

max time kernel
132s
max time network
165s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
01/12/2022, 18:50

Target

b944bcedbac923b06cde9d76962ec64dac7e81c88b7cd0c2d2b30ddff09023fd.dll
Size

4KB
MD5

35522ca0db4e744ed43a61e6e1246540
SHA1

4b11d0b41268499d49d8732bf7560a6375c78396
SHA256

b944bcedbac923b06cde9d76962ec64dac7e81c88b7cd0c2d2b30ddff09023fd
SHA512

b508da5bb7729a02b520c66dbf35f3074fc2f5e0755de6a4f7cab4f218e1b02a7c8677d41935572535f65d5b189e88d615f87f658e3c1cb6635ae966661fb313
SSDEEP

48:iMHGv8j2IcW89NYEArhWHR0MiiIsiI6lXVkqlcH2SuiS6o+mm9nCbtUgRZS:PmkiIz8UZrQ0MhI/ITqly9wHRg

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 5100 wrote to memory of 5084	5100	rundll32.exe	82
PID 5100 wrote to memory of 5084	5100	rundll32.exe	82
PID 5100 wrote to memory of 5084	5100	rundll32.exe	82

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\b944bcedbac923b06cde9d76962ec64dac7e81c88b7cd0c2d2b30ddff09023fd.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:5100
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\b944bcedbac923b06cde9d76962ec64dac7e81c88b7cd0c2d2b30ddff09023fd.dll,#1
  2⤵
  PID:5084