cb1ffa7884b26d370160f7e59601d47c59656faa06429c4886675d41fee0dd21

Analysis

max time kernel
163s
max time network
204s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
04/12/2022, 01:51

Target

cb1ffa7884b26d370160f7e59601d47c59656faa06429c4886675d41fee0dd21.dll
Size

32KB
MD5

4f84c6302fce586c87e737b690e5ce10
SHA1

0fae5ebc384d21edb433d70c7bd0a43f031d16ea
SHA256

cb1ffa7884b26d370160f7e59601d47c59656faa06429c4886675d41fee0dd21
SHA512

66f64039442f6cb85f55906bc615be680a240888176b25d3a7f60b6c30654eb2ff0e29db37b6da352d5c84186fab4ab7a7487c9074fba0137db12b7452c048f3
SSDEEP

768:LMhqpHLSlNb31pbNG7v6fbZOVOQKTRqMuBkK:oqpA1pQ7ifbK2RqMuBd

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2244 wrote to memory of 1644	2244	rundll32.exe	81
PID 2244 wrote to memory of 1644	2244	rundll32.exe	81
PID 2244 wrote to memory of 1644	2244	rundll32.exe	81

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\cb1ffa7884b26d370160f7e59601d47c59656faa06429c4886675d41fee0dd21.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2244
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\cb1ffa7884b26d370160f7e59601d47c59656faa06429c4886675d41fee0dd21.dll,#1
  2⤵
  PID:1644