Analysis
-
max time kernel
226s -
max time network
337s -
platform
windows7_x64 -
resource
win7-20221111-en -
resource tags
arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system -
submitted
03-12-2022 12:56
Behavioral task
behavioral1
Sample
cce4a204e6857b23112212cb01c34a6912db6b743b6a69eb51bdf9ddffa045c9.dll
Resource
win7-20221111-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
cce4a204e6857b23112212cb01c34a6912db6b743b6a69eb51bdf9ddffa045c9.dll
Resource
win10v2004-20220901-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
cce4a204e6857b23112212cb01c34a6912db6b743b6a69eb51bdf9ddffa045c9.dll
-
Size
58KB
-
MD5
ff5813c90a35c8f7997c6b0fcfb20381
-
SHA1
5abdd162d78526718259a71782a24c97a06effe6
-
SHA256
cce4a204e6857b23112212cb01c34a6912db6b743b6a69eb51bdf9ddffa045c9
-
SHA512
872bc95ef5e21382596039dfa44aa66df6f437e06d578590a8df8be352c5ab57495668302c608188634c19b4ae1c795ee73016303244108eb82c6fa5b274b953
-
SSDEEP
1536:23umoMtxhj/wGNKHc6657oPsgkb0mC5+aj9:CoMtxh8GN8657Bg5mC5+aj9
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 7 IoCs
description pid Process procid_target PID 520 wrote to memory of 556 520 rundll32.exe 28 PID 520 wrote to memory of 556 520 rundll32.exe 28 PID 520 wrote to memory of 556 520 rundll32.exe 28 PID 520 wrote to memory of 556 520 rundll32.exe 28 PID 520 wrote to memory of 556 520 rundll32.exe 28 PID 520 wrote to memory of 556 520 rundll32.exe 28 PID 520 wrote to memory of 556 520 rundll32.exe 28
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\cce4a204e6857b23112212cb01c34a6912db6b743b6a69eb51bdf9ddffa045c9.dll,#11⤵
- Suspicious use of WriteProcessMemory
PID:520 -
C:\Windows\SysWOW64\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\cce4a204e6857b23112212cb01c34a6912db6b743b6a69eb51bdf9ddffa045c9.dll,#12⤵PID:556
-