63b4c0c0e121f2fb73353fdf87baae50d1d1fd831f90639f98479484a09fd0a4

Analysis

max time kernel
217s
max time network
238s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
02/12/2022, 02:22

Target

63b4c0c0e121f2fb73353fdf87baae50d1d1fd831f90639f98479484a09fd0a4.dll
Size

4KB
MD5

23b153c757c1540b58bb82b5c0a77920
SHA1

46859b945abec95885b828f61717227f76757ac8
SHA256

63b4c0c0e121f2fb73353fdf87baae50d1d1fd831f90639f98479484a09fd0a4
SHA512

51895aa629141849958a9d4021f8cb5499b627f1927b085559942e18805f1d7db1ea3a1adcde7a496a793dbfe7c4d1d20aeec007a4602ad019e7a851617dacfa
SSDEEP

96:Ts1Wnnnynnnnnnnn6nnann7nnXnnbnnKniROAV:YXtV

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 216 wrote to memory of 3380	216	rundll32.exe	81
PID 216 wrote to memory of 3380	216	rundll32.exe	81
PID 216 wrote to memory of 3380	216	rundll32.exe	81

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\63b4c0c0e121f2fb73353fdf87baae50d1d1fd831f90639f98479484a09fd0a4.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:216
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\63b4c0c0e121f2fb73353fdf87baae50d1d1fd831f90639f98479484a09fd0a4.dll,#1
  2⤵
  PID:3380