60002189dd40187614762218741cd6fe8c39d4ac76e36602b70c4efbc654249b

Analysis

max time kernel
142s
max time network
172s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
03/12/2022, 04:53

Target

60002189dd40187614762218741cd6fe8c39d4ac76e36602b70c4efbc654249b.dll
Size

36KB
MD5

f4c2a74015c4ac06f7ede2e160cdcc62
SHA1

39ac6d9dda2794c37cf5ac85972458623be64e31
SHA256

60002189dd40187614762218741cd6fe8c39d4ac76e36602b70c4efbc654249b
SHA512

53f48964fff8e042f597e6cad3539db2185b48814893aba0f476cd0acc31c087c210d2b21f4bf7cf3ef1fd890186de7db2891506d3f86aac1804f44776305beb
SSDEEP

768:Gf53hJbyNbNON0lQwuXgcR1pV7Oq7Kj95hNDRR0VAZmLUbD:gxByNbN+eqgcRF7V7YvdR0VAFD

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 396 wrote to memory of 904	396	rundll32.exe	80
PID 396 wrote to memory of 904	396	rundll32.exe	80
PID 396 wrote to memory of 904	396	rundll32.exe	80

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\60002189dd40187614762218741cd6fe8c39d4ac76e36602b70c4efbc654249b.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:396
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\60002189dd40187614762218741cd6fe8c39d4ac76e36602b70c4efbc654249b.dll,#1
  2⤵
  PID:904