c55837423b02513fd8931f682b1efc69a6124e3fbc7d472347622d16191cb752

Analysis

max time kernel
180s
max time network
195s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
03/12/2022, 22:23

Target

c55837423b02513fd8931f682b1efc69a6124e3fbc7d472347622d16191cb752.dll
Size

6KB
MD5

f57f7ce8af68ec17c27614d8a0301a80
SHA1

90d417f232fbf021eba64249d8003d0faaa7d5c9
SHA256

c55837423b02513fd8931f682b1efc69a6124e3fbc7d472347622d16191cb752
SHA512

80d722554e5751ea94869eeef9a64d2786d399892b93ddc4d041badc7448356ec384d83813ebc16fa6622ba38756f350d9e0e3729969e9af34af0d84be21bd62
SSDEEP

96:z0/gPtJrYmVjGwd+8blPDDDDDDDDEZSzOxqIBZtBOqJ124fqTgsCO3TcS0Nj5rHM:FTiS+siZVAXcNho

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 4084 wrote to memory of 2764	4084	rundll32.exe	81
PID 4084 wrote to memory of 2764	4084	rundll32.exe	81
PID 4084 wrote to memory of 2764	4084	rundll32.exe	81

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\c55837423b02513fd8931f682b1efc69a6124e3fbc7d472347622d16191cb752.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:4084
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\c55837423b02513fd8931f682b1efc69a6124e3fbc7d472347622d16191cb752.dll,#1
  2⤵
  PID:2764