b518618d7a82a38503dfba9a366cc42eed20e6f3c0b12c91b2d99073f34c3e46

Analysis

max time kernel
42s
max time network
45s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
01/12/2022, 19:05

Target

b518618d7a82a38503dfba9a366cc42eed20e6f3c0b12c91b2d99073f34c3e46.dll
Size

849KB
MD5

bcc5b154dbfc38a44235ddc32bff05d0
SHA1

1921c1b013370600cfc426ecb0fcb726244caa86
SHA256

b518618d7a82a38503dfba9a366cc42eed20e6f3c0b12c91b2d99073f34c3e46
SHA512

be6ac9279ea24b7b51e677830cefc4d58166042c046c6f99d943b7b17e4fda105309cf9b3174ec2516eb73c3dceb5d7c0cbedbb7f6995c4f0175010dc062cf56
SSDEEP

12288:bBKdj5eYUSUBqFuEnAyYkl1mKQTC2h1kTLfrycYgjAOUxp/6yAOP9S1Gwod:bBKbWSUIJnAyYgfOkhEDg81dd

Score

1^/10

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 828 wrote to memory of 1972	828	rundll32.exe	28
PID 828 wrote to memory of 1972	828	rundll32.exe	28
PID 828 wrote to memory of 1972	828	rundll32.exe	28
PID 828 wrote to memory of 1972	828	rundll32.exe	28
PID 828 wrote to memory of 1972	828	rundll32.exe	28
PID 828 wrote to memory of 1972	828	rundll32.exe	28
PID 828 wrote to memory of 1972	828	rundll32.exe	28

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\b518618d7a82a38503dfba9a366cc42eed20e6f3c0b12c91b2d99073f34c3e46.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:828
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\b518618d7a82a38503dfba9a366cc42eed20e6f3c0b12c91b2d99073f34c3e46.dll,#1
  2⤵
  PID:1972

memory/1972-55-0x0000000075A11000-0x0000000075A13000-memory.dmp

Filesize
8KB

Download
memory/1972-56-0x0000000000850000-0x000000000092D000-memory.dmp

Filesize
884KB

Download
memory/1972-57-0x0000000000850000-0x000000000092D000-memory.dmp

Filesize
884KB

Download
memory/1972-58-0x0000000000850000-0x000000000092D000-memory.dmp

Filesize
884KB

Download
memory/1972-59-0x0000000000850000-0x000000000092D000-memory.dmp

Filesize
884KB

Download
memory/1972-60-0x0000000000850000-0x0000000000911000-memory.dmp

Filesize
772KB

Download