dedbbf5d7b0cc1c349ba7f6462c701b66f61e68f79e989953c031b0aca18e445

Analysis

max time kernel
149s
max time network
167s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
02-12-2022 19:18

Target

dedbbf5d7b0cc1c349ba7f6462c701b66f61e68f79e989953c031b0aca18e445.dll
Size

56KB
MD5

603ade27014dcd9545b0018eb800c240
SHA1

d3c6457861187c1dddd950d1f62ff0f390d944ac
SHA256

dedbbf5d7b0cc1c349ba7f6462c701b66f61e68f79e989953c031b0aca18e445
SHA512

e0dad5ffe734fce9c11e9d03a990637bf146b22cc01bbd643b27d49521b02dc472db226115010b21d86514177508596378b38e22af62735e065c71e90061618b
SSDEEP

768:Gx4m7JNSll3dTG+wYnn+NfoF5C09ziWuj136Wwd7UkpCbkXgadeFo51Dk:Bm1NGJVG5YSo5lNU1wDAGk+I

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2356 wrote to memory of 4064	2356	rundll32.exe	82
PID 2356 wrote to memory of 4064	2356	rundll32.exe	82
PID 2356 wrote to memory of 4064	2356	rundll32.exe	82

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\dedbbf5d7b0cc1c349ba7f6462c701b66f61e68f79e989953c031b0aca18e445.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2356
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\dedbbf5d7b0cc1c349ba7f6462c701b66f61e68f79e989953c031b0aca18e445.dll,#1
  2⤵
  PID:4064