988899db068af655e28d7770c65fc35e0b27ba1b948fb1d5213fa069d5e49862

Analysis

max time kernel
130s
max time network
134s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
03/12/2022, 10:41

Target

988899db068af655e28d7770c65fc35e0b27ba1b948fb1d5213fa069d5e49862.dll
Size

6KB
MD5

fd39616eb26eef643cbe1d9383470310
SHA1

4dd241f0a0eaa554b06c40bf2fe0f756f3065edd
SHA256

988899db068af655e28d7770c65fc35e0b27ba1b948fb1d5213fa069d5e49862
SHA512

e54789dfe14b2eee475bf9e99b44d346f7303da886efbdc564810a2460d329cb65d84b3c8e74f044f13d0c6279c2d1c43606e59cd7859669f086276f828f8248
SSDEEP

96:juNrYuJ59oAwGQUI/TQahtCl8X3pSHnmnD77fo7ZE:juLJ/oAdQPQa2aeng77wu

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 3112 wrote to memory of 2276	3112	rundll32.exe	76
PID 3112 wrote to memory of 2276	3112	rundll32.exe	76
PID 3112 wrote to memory of 2276	3112	rundll32.exe	76

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\988899db068af655e28d7770c65fc35e0b27ba1b948fb1d5213fa069d5e49862.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:3112
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\988899db068af655e28d7770c65fc35e0b27ba1b948fb1d5213fa069d5e49862.dll,#1
  2⤵
  PID:2276