54692cb3a59f858356a5befd298eb82f4b0a2cdff4dac1cd140f360abf112424

Analysis

max time kernel
91s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
03-12-2022 23:09

Target

54692cb3a59f858356a5befd298eb82f4b0a2cdff4dac1cd140f360abf112424.dll
Size

6KB
MD5

bb598bfa5141cb4ebf645a0d6f585c70
SHA1

61baeec4aaf7116d49947642ce682c87073be5ed
SHA256

54692cb3a59f858356a5befd298eb82f4b0a2cdff4dac1cd140f360abf112424
SHA512

a0bb308453a8b60e8e20753317133ac40f098ed8aaa3298b102cb2d844d34799517595bef36603cb247d2032004d3c08bb3bfca96e3e14c2c51dff3893266ce8
SSDEEP

96:WLRxkjujtjd8jPjcZG2Uo+wcpHY4IqhQKP8sma2bZPAN:WtqKR6bgYIOpHY41QYa2N

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1316 wrote to memory of 4760	1316	rundll32.exe	82
PID 1316 wrote to memory of 4760	1316	rundll32.exe	82
PID 1316 wrote to memory of 4760	1316	rundll32.exe	82

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\54692cb3a59f858356a5befd298eb82f4b0a2cdff4dac1cd140f360abf112424.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:1316
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\54692cb3a59f858356a5befd298eb82f4b0a2cdff4dac1cd140f360abf112424.dll,#1
  2⤵
  PID:4760