7740b91e6d8748d3ae0cbf5a9898ea538bb9f9cd0ef399d595550874e6007fbc

Analysis

max time kernel
51s
max time network
130s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
02/12/2022, 02:17

Target

7740b91e6d8748d3ae0cbf5a9898ea538bb9f9cd0ef399d595550874e6007fbc.dll
Size

5KB
MD5

ff38f12a34eac7da48498c90b93ea0b0
SHA1

f753a0501f8b610656f9a14f3ee115b0f8a156c2
SHA256

7740b91e6d8748d3ae0cbf5a9898ea538bb9f9cd0ef399d595550874e6007fbc
SHA512

c3b6b18c0e31254f72eb17866c00311dbec61cf24ab57f5166936d5a3db73c5e75d6f66aac466a92885f8514f3caa4b0f7d9d1d9b8e6aef5876b7ee368941409
SSDEEP

48:C6Vo9HBok7lYa92RranDBetlG9Mgx91cCbp7AT33Vh+rqYyEOf1awEJd:nI2RrUeqV1l7433Vh+rqYyEoYw

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 4572 wrote to memory of 1532	4572	rundll32.exe	80
PID 4572 wrote to memory of 1532	4572	rundll32.exe	80
PID 4572 wrote to memory of 1532	4572	rundll32.exe	80

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\7740b91e6d8748d3ae0cbf5a9898ea538bb9f9cd0ef399d595550874e6007fbc.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:4572
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\7740b91e6d8748d3ae0cbf5a9898ea538bb9f9cd0ef399d595550874e6007fbc.dll,#1
  2⤵
  PID:1532