45c5378d738528b75711ec775a52445219292e7576b314eb60fd3f27c2ca7e6f

Analysis

max time kernel
170s
max time network
178s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
03/12/2022, 23:12

Target

45c5378d738528b75711ec775a52445219292e7576b314eb60fd3f27c2ca7e6f.dll
Size

5KB
MD5

5847d8d734dbcda38af6fc5ca39defb0
SHA1

ad5c20e2fc47af91503f5f25994e3cbf5a41d1d8
SHA256

45c5378d738528b75711ec775a52445219292e7576b314eb60fd3f27c2ca7e6f
SHA512

c72a07b76266819d861ae492e34a44c910156ea0fcd4b5806d95be375f2a9f45f8764e843c5129137ce9e9544fb9f328a2d40f0c35e3fd456496857cef19743c
SSDEEP

96:XprYDpKnI6wJ+Ls7guyHejyn/I9l0iaiisxi:XUcA+ggd+W/If0ilxi

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 4716 wrote to memory of 4748	4716	rundll32.exe	79
PID 4716 wrote to memory of 4748	4716	rundll32.exe	79
PID 4716 wrote to memory of 4748	4716	rundll32.exe	79

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\45c5378d738528b75711ec775a52445219292e7576b314eb60fd3f27c2ca7e6f.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:4716
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\45c5378d738528b75711ec775a52445219292e7576b314eb60fd3f27c2ca7e6f.dll,#1
  2⤵
  PID:4748