cc44df4c4c58b6e24172f727fb3310d4f874f6955f86165532cd766160ad9f0c

Analysis

max time kernel
101s
max time network
171s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
03-12-2022 21:47

Target

cc44df4c4c58b6e24172f727fb3310d4f874f6955f86165532cd766160ad9f0c.dll
Size

5KB
MD5

2475556c33cc58456e1e0edcbdece5c0
SHA1

21b5ae0fcec8fceac44690bf3eb15914d14ce388
SHA256

cc44df4c4c58b6e24172f727fb3310d4f874f6955f86165532cd766160ad9f0c
SHA512

978248c79a1b854cd3b518cb8037b1fa30a49dec7429e94af77402c80aeca7f7a1f5d38dd38f55b0a799807bef7c73d2ded371d8bca0d2ea54881b754768326e
SSDEEP

48:C6VonAHso6U7lYa92RrpjwDmetlG95hx+iMHhbnsbZv6ANOT//vIqcRPItb1zqFr:nEY2RrF1eqwi42N8//Towt4l

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 4084 wrote to memory of 2044	4084	rundll32.exe	78
PID 4084 wrote to memory of 2044	4084	rundll32.exe	78
PID 4084 wrote to memory of 2044	4084	rundll32.exe	78

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\cc44df4c4c58b6e24172f727fb3310d4f874f6955f86165532cd766160ad9f0c.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:4084
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\cc44df4c4c58b6e24172f727fb3310d4f874f6955f86165532cd766160ad9f0c.dll,#1
  2⤵
  PID:2044