cce4a204e6857b23112212cb01c34a6912db6b743b6a69eb51bdf9ddffa045c9

Analysis

max time kernel
90s
max time network
140s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
03/12/2022, 12:56

Target

cce4a204e6857b23112212cb01c34a6912db6b743b6a69eb51bdf9ddffa045c9.dll
Size

58KB
MD5

ff5813c90a35c8f7997c6b0fcfb20381
SHA1

5abdd162d78526718259a71782a24c97a06effe6
SHA256

cce4a204e6857b23112212cb01c34a6912db6b743b6a69eb51bdf9ddffa045c9
SHA512

872bc95ef5e21382596039dfa44aa66df6f437e06d578590a8df8be352c5ab57495668302c608188634c19b4ae1c795ee73016303244108eb82c6fa5b274b953
SSDEEP

1536:23umoMtxhj/wGNKHc6657oPsgkb0mC5+aj9:CoMtxh8GN8657Bg5mC5+aj9

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2200 wrote to memory of 388	2200	rundll32.exe	81
PID 2200 wrote to memory of 388	2200	rundll32.exe	81
PID 2200 wrote to memory of 388	2200	rundll32.exe	81

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\cce4a204e6857b23112212cb01c34a6912db6b743b6a69eb51bdf9ddffa045c9.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2200
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\cce4a204e6857b23112212cb01c34a6912db6b743b6a69eb51bdf9ddffa045c9.dll,#1
  2⤵
  PID:388